@langchain/core 1.1.20 → 1.1.21

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @langchain/core
 
+## 1.1.21
+
+### Patch Changes
+
+- [#9990](https://github.com/langchain-ai/langchainjs/pull/9990) [`d5e3db0`](https://github.com/langchain-ai/langchainjs/commit/d5e3db0d01ab321ec70a875805b2f74aefdadf9d) Thanks [@hntrl](https://github.com/hntrl)! - feat(core): Add SSRF protection module (`@langchain/core/utils/ssrf`) with utilities for validating URLs against private IPs, cloud metadata endpoints, and localhost.
+
+  fix(community): Harden `RecursiveUrlLoader` against SSRF attacks by integrating `validateSafeUrl` and replacing string-based URL comparison with origin-based `isSameOrigin` from the shared SSRF module.
+
 ## 1.1.20
 
 ### Patch Changes

package/dist/agents.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.cts","names":["AgentAction","Record","AgentFinish","AgentStep"],"sources":["../src/agents.d.ts"],"sourcesContent":["export type AgentAction = {\n    tool: string;\n    toolInput: string | Record<string, any>;\n    log: string;\n};\nexport type AgentFinish = {\n    returnValues: Record<string, any>;\n    log: string;\n};\nexport type AgentStep = {\n    action: AgentAction;\n    observation: string;\n};\n//# sourceMappingURL=agents.d.ts.map"],"mappings":";KAAYA,WAAAA;EAAAA,IAAAA,EAAAA,MAAAA;EAKAE,SAAAA,EAAAA,MAAW,GAHCD,MAINA,CAAAA,MAAM,EAAA,GAAA,CAAA;EAGZE,GAAAA,EAAAA,MAAAA;;KAJAD,WAAAA;gBACMD;;;KAGNE,SAAAA;UACAH"}
+{"version":3,"file":"agents.d.cts","names":["AgentAction","Record","AgentFinish","AgentStep"],"sources":["../src/agents.d.ts"],"sourcesContent":["export type AgentAction = {\n    tool: string;\n    toolInput: string | Record<string, any>;\n    log: string;\n};\nexport type AgentFinish = {\n    returnValues: Record<string, any>;\n    log: string;\n};\nexport type AgentStep = {\n    action: AgentAction;\n    observation: string;\n};\n//# sourceMappingURL=agents.d.ts.map"],"mappings":";KAAYA,WAAAA;EAAAA,IAAAA,EAAAA,MAAAA;EAKAE,SAAAA,EAAAA,MAAW,GAHCD,MAGD,CACLA,MAAM,EAAA,GAAA,CAAA;EAGZE,GAAAA,EAAAA,MAAAA;;KAJAD,WAAAA;gBACMD;;;KAGNE,SAAAA;UACAH"}

package/dist/caches/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":["___messages_ai_js0","___messages_chat_js0","___messages_function_js0","___messages_human_js0","___messages_system_js0","___messages_tool_js0","HashKeyEncoder","Generation","StoredGeneration","defaultHashKeyEncoder","deserializeStoredGeneration","___messages_message_js2","MessageToolSet","MessageStructure","AIMessage","ChatMessage","FunctionMessage","HumanMessage","SystemMessage","ToolMessage","serializeGeneration","BaseCache","T","Promise","InMemoryCache","Map"],"sources":["../../src/caches/index.d.ts"],"sourcesContent":["import { type HashKeyEncoder } from \"../utils/hash.js\";\nimport type { Generation } from \"../outputs.js\";\nimport { type StoredGeneration } from \"../messages/base.js\";\nexport declare const defaultHashKeyEncoder: HashKeyEncoder;\nexport declare function deserializeStoredGeneration(storedGeneration: StoredGeneration): {\n    text: string;\n    message: import(\"../messages/ai.js\").AIMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>> | import(\"../messages/chat.js\").ChatMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>> | import(\"../messages/function.js\").FunctionMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>> | import(\"../messages/human.js\").HumanMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>> | import(\"../messages/system.js\").SystemMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>> | import(\"../messages/tool.js\").ToolMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>>;\n} | {\n    message?: undefined;\n    text: string;\n};\nexport declare function serializeGeneration(generation: Generation): StoredGeneration;\n/**\n * Base class for all caches. All caches should extend this class.\n */\nexport declare abstract class BaseCache<T = Generation[]> {\n    protected keyEncoder: HashKeyEncoder;\n    /**\n     * Sets a custom key encoder function for the cache.\n     * This function should take a prompt and an LLM key and return a string\n     * that will be used as the cache key.\n     * @param keyEncoderFn The custom key encoder function.\n     */\n    makeDefaultKeyEncoder(keyEncoderFn: HashKeyEncoder): void;\n    abstract lookup(prompt: string, llmKey: string): Promise<T | null>;\n    abstract update(prompt: string, llmKey: string, value: T): Promise<void>;\n}\n/**\n * A cache for storing LLM generations that stores data in memory.\n */\nexport declare class InMemoryCache<T = Generation[]> extends BaseCache<T> {\n    private cache;\n    constructor(map?: Map<string, T>);\n    /**\n     * Retrieves data from the cache using a prompt and an LLM key. If the\n     * data is not found, it returns null.\n     * @param prompt The prompt used to find the data.\n     * @param llmKey The LLM key used to find the data.\n     * @returns The data corresponding to the prompt and LLM key, or null if not found.\n     */\n    lookup(prompt: string, llmKey: string): Promise<T | null>;\n    /**\n     * Updates the cache with new data using a prompt and an LLM key.\n     * @param prompt The prompt used to store the data.\n     * @param llmKey The LLM key used to store the data.\n     * @param value The data to be stored.\n     */\n    update(prompt: string, llmKey: string, value: T): Promise<void>;\n    /**\n     * Returns a global instance of InMemoryCache using a predefined global\n     * map as the initial cache.\n     * @returns A global instance of InMemoryCache.\n     */\n    static global(): InMemoryCache;\n}\n//# sourceMappingURL=index.d.ts.map"],"mappings":";;;;;;;;;;;;cAGqBS,uBAAuBH;iBACpBI,2BAAAA,mBAA8CF;;;;;;;iBAO9CY,mBAAAA,aAAgCb,aAAaC;AARrE;AACA;;uBAW8Ba,cAAcd;wBAClBD;;;;;;;sCAOcA;mDACaiB,QAAQD;yDACFA,IAAIC;;;;;cAK1CC,kBAAkBjB,sBAAsBc,UAAUC;;oBAEjDG,YAAYH;EA1B8uB;AAKhxB;AAIA;;;;;EASqDC,MAAAA,CAAAA,MAAAA,EAAAA,MAAAA,EAAAA,MAAAA,EAAAA,MAAAA,CAAAA,EAgBTA,OAhBSA,CAgBDD,CAhBCC,GAAAA,IAAAA,CAAAA;EACMD;;AAAW;AAKtE;;;EAEkCA,MAAAA,CAAAA,MAAAA,EAAAA,MAAAA,EAAAA,MAAAA,EAAAA,MAAAA,EAAAA,KAAAA,EAegBA,CAfhBA,CAAAA,EAeoBC,OAfpBD,CAAAA,IAAAA,CAAAA;EAAZG;;;;;EAqBDD,OAAAA,MAAAA,CAAAA,CAAAA,EAAAA,aAAAA"}
+{"version":3,"file":"index.d.cts","names":["___messages_ai_js0","___messages_chat_js0","___messages_function_js0","___messages_human_js0","___messages_system_js0","___messages_tool_js0","HashKeyEncoder","Generation","StoredGeneration","defaultHashKeyEncoder","deserializeStoredGeneration","___messages_message_js0","MessageToolSet","MessageStructure","AIMessage","ChatMessage","FunctionMessage","HumanMessage","SystemMessage","ToolMessage","serializeGeneration","BaseCache","T","Promise","InMemoryCache","Map"],"sources":["../../src/caches/index.d.ts"],"sourcesContent":["import { type HashKeyEncoder } from \"../utils/hash.js\";\nimport type { Generation } from \"../outputs.js\";\nimport { type StoredGeneration } from \"../messages/base.js\";\nexport declare const defaultHashKeyEncoder: HashKeyEncoder;\nexport declare function deserializeStoredGeneration(storedGeneration: StoredGeneration): {\n    text: string;\n    message: import(\"../messages/ai.js\").AIMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>> | import(\"../messages/chat.js\").ChatMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>> | import(\"../messages/function.js\").FunctionMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>> | import(\"../messages/human.js\").HumanMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>> | import(\"../messages/system.js\").SystemMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>> | import(\"../messages/tool.js\").ToolMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>>;\n} | {\n    message?: undefined;\n    text: string;\n};\nexport declare function serializeGeneration(generation: Generation): StoredGeneration;\n/**\n * Base class for all caches. All caches should extend this class.\n */\nexport declare abstract class BaseCache<T = Generation[]> {\n    protected keyEncoder: HashKeyEncoder;\n    /**\n     * Sets a custom key encoder function for the cache.\n     * This function should take a prompt and an LLM key and return a string\n     * that will be used as the cache key.\n     * @param keyEncoderFn The custom key encoder function.\n     */\n    makeDefaultKeyEncoder(keyEncoderFn: HashKeyEncoder): void;\n    abstract lookup(prompt: string, llmKey: string): Promise<T | null>;\n    abstract update(prompt: string, llmKey: string, value: T): Promise<void>;\n}\n/**\n * A cache for storing LLM generations that stores data in memory.\n */\nexport declare class InMemoryCache<T = Generation[]> extends BaseCache<T> {\n    private cache;\n    constructor(map?: Map<string, T>);\n    /**\n     * Retrieves data from the cache using a prompt and an LLM key. If the\n     * data is not found, it returns null.\n     * @param prompt The prompt used to find the data.\n     * @param llmKey The LLM key used to find the data.\n     * @returns The data corresponding to the prompt and LLM key, or null if not found.\n     */\n    lookup(prompt: string, llmKey: string): Promise<T | null>;\n    /**\n     * Updates the cache with new data using a prompt and an LLM key.\n     * @param prompt The prompt used to store the data.\n     * @param llmKey The LLM key used to store the data.\n     * @param value The data to be stored.\n     */\n    update(prompt: string, llmKey: string, value: T): Promise<void>;\n    /**\n     * Returns a global instance of InMemoryCache using a predefined global\n     * map as the initial cache.\n     * @returns A global instance of InMemoryCache.\n     */\n    static global(): InMemoryCache;\n}\n//# sourceMappingURL=index.d.ts.map"],"mappings":";;;;;;;;;;;;cAGqBS,uBAAuBH;iBACpBI,2BAAAA,mBAA8CF;;;;;;;iBAO9CY,mBAAAA,aAAgCb,aAAaC;AARrE;AACA;;uBAW8Ba,cAAcd;wBAClBD;;;;;;;sCAOcA;mDACaiB,QAAQD;yDACFA,IAAIC;;;;;cAK1CC,kBAAkBjB,sBAAsBc,UAAUC;;oBAEjDG,YAAYH;EA1B8uB;AAKhxB;AAIA;;;;;EASqDC,MAAAA,CAAAA,MAAAA,EAAAA,MAAAA,EAAAA,MAAAA,EAAAA,MAAAA,CAAAA,EAgBTA,OAhBSA,CAgBDD,CAhBCC,GAAAA,IAAAA,CAAAA;EACMD;;AAAW;AAKtE;;;EAEkCA,MAAAA,CAAAA,MAAAA,EAAAA,MAAAA,EAAAA,MAAAA,EAAAA,MAAAA,EAAAA,KAAAA,EAegBA,CAfhBA,CAAAA,EAeoBC,OAfpBD,CAAAA,IAAAA,CAAAA;EAAZG;;;;;EAqBDD,OAAAA,MAAAA,CAAAA,CAAAA,EAAAA,aAAAA"}

package/dist/callbacks/base.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.cts","names":["ChainValues","BaseMessage","AgentAction","AgentFinish","ChatGenerationChunk","GenerationChunk","LLMResult","Serializable","Serialized","SerializedNotImplemented","SerializedFields","DocumentInterface","Error","BaseCallbackHandlerInput","NewTokenIndices","HandleLLMNewTokenCallbackFields","BaseCallbackHandlerMethodsClass","Record","Promise","CallbackHandlerMethods","CallbackHandlerPrefersStreaming","callbackHandlerPrefersStreaming","BaseCallbackHandler","___messages_message_js0","MessageToolSet","MessageStructure","MessageType","isBaseCallbackHandler"],"sources":["../../src/callbacks/base.d.ts"],"sourcesContent":["import type { ChainValues } from \"../utils/types/index.js\";\nimport type { BaseMessage } from \"../messages/base.js\";\nimport type { AgentAction, AgentFinish } from \"../agents.js\";\nimport type { ChatGenerationChunk, GenerationChunk, LLMResult } from \"../outputs.js\";\nimport { Serializable, Serialized, SerializedNotImplemented } from \"../load/serializable.js\";\nimport type { SerializedFields } from \"../load/map_keys.js\";\nimport type { DocumentInterface } from \"../documents/document.js\";\ntype Error = any;\n/**\n * Interface for the input parameters of the BaseCallbackHandler class. It\n * allows to specify which types of events should be ignored by the\n * callback handler.\n */\nexport interface BaseCallbackHandlerInput {\n    ignoreLLM?: boolean;\n    ignoreChain?: boolean;\n    ignoreAgent?: boolean;\n    ignoreRetriever?: boolean;\n    ignoreCustomEvent?: boolean;\n    _awaitHandler?: boolean;\n    raiseError?: boolean;\n}\n/**\n * Interface for the indices of a new token produced by an LLM or Chat\n * Model in streaming mode.\n */\nexport interface NewTokenIndices {\n    prompt: number;\n    completion: number;\n}\nexport type HandleLLMNewTokenCallbackFields = {\n    chunk?: GenerationChunk | ChatGenerationChunk;\n};\n/**\n * Abstract class that provides a set of optional methods that can be\n * overridden in derived classes to handle various events during the\n * execution of a LangChain application.\n */\ndeclare abstract class BaseCallbackHandlerMethodsClass {\n    /**\n     * Called at the start of an LLM or Chat Model run, with the prompt(s)\n     * and the run ID.\n     */\n    handleLLMStart?(llm: Serialized, prompts: string[], runId: string, parentRunId?: string, extraParams?: Record<string, unknown>, tags?: string[], metadata?: Record<string, unknown>, runName?: string): Promise<any> | any;\n    /**\n     * Called when an LLM/ChatModel in `streaming` mode produces a new token\n     */\n    handleLLMNewToken?(token: string, \n    /**\n     * idx.prompt is the index of the prompt that produced the token\n     *   (if there are multiple prompts)\n     * idx.completion is the index of the completion that produced the token\n     *   (if multiple completions per prompt are requested)\n     */\n    idx: NewTokenIndices, runId: string, parentRunId?: string, tags?: string[], fields?: HandleLLMNewTokenCallbackFields): Promise<any> | any;\n    /**\n     * Called if an LLM/ChatModel run encounters an error\n     */\n    handleLLMError?(err: Error, runId: string, parentRunId?: string, tags?: string[], extraParams?: Record<string, unknown>): Promise<any> | any;\n    /**\n     * Called at the end of an LLM/ChatModel run, with the output and the run ID.\n     */\n    handleLLMEnd?(output: LLMResult, runId: string, parentRunId?: string, tags?: string[], extraParams?: Record<string, unknown>): Promise<any> | any;\n    /**\n     * Called at the start of a Chat Model run, with the prompt(s)\n     * and the run ID.\n     */\n    handleChatModelStart?(llm: Serialized, messages: BaseMessage[][], runId: string, parentRunId?: string, extraParams?: Record<string, unknown>, tags?: string[], metadata?: Record<string, unknown>, runName?: string): Promise<any> | any;\n    /**\n     * Called at the start of a Chain run, with the chain name and inputs\n     * and the run ID.\n     */\n    handleChainStart?(chain: Serialized, inputs: ChainValues, runId: string, runType?: string, tags?: string[], metadata?: Record<string, unknown>, runName?: string, parentRunId?: string, extra?: Record<string, unknown>): Promise<any> | any;\n    /**\n     * Called if a Chain run encounters an error\n     */\n    handleChainError?(err: Error, runId: string, parentRunId?: string, tags?: string[], kwargs?: {\n        inputs?: Record<string, unknown>;\n    }): Promise<any> | any;\n    /**\n     * Called at the end of a Chain run, with the outputs and the run ID.\n     */\n    handleChainEnd?(outputs: ChainValues, runId: string, parentRunId?: string, tags?: string[], kwargs?: {\n        inputs?: Record<string, unknown>;\n    }): Promise<any> | any;\n    /**\n     * Called at the start of a Tool run, with the tool name and input\n     * and the run ID.\n     */\n    handleToolStart?(tool: Serialized, input: string, runId: string, parentRunId?: string, tags?: string[], metadata?: Record<string, unknown>, runName?: string): Promise<any> | any;\n    /**\n     * Called if a Tool run encounters an error\n     */\n    handleToolError?(err: Error, runId: string, parentRunId?: string, tags?: string[]): Promise<any> | any;\n    /**\n     * Called at the end of a Tool run, with the tool output and the run ID.\n     */\n    handleToolEnd?(output: any, runId: string, parentRunId?: string, tags?: string[]): Promise<any> | any;\n    handleText?(text: string, runId: string, parentRunId?: string, tags?: string[]): Promise<void> | void;\n    /**\n     * Called when an agent is about to execute an action,\n     * with the action and the run ID.\n     */\n    handleAgentAction?(action: AgentAction, runId: string, parentRunId?: string, tags?: string[]): Promise<void> | void;\n    /**\n     * Called when an agent finishes execution, before it exits.\n     * with the final output and the run ID.\n     */\n    handleAgentEnd?(action: AgentFinish, runId: string, parentRunId?: string, tags?: string[]): Promise<void> | void;\n    handleRetrieverStart?(retriever: Serialized, query: string, runId: string, parentRunId?: string, tags?: string[], metadata?: Record<string, unknown>, name?: string): Promise<any> | any;\n    handleRetrieverEnd?(documents: DocumentInterface[], runId: string, parentRunId?: string, tags?: string[]): Promise<any> | any;\n    handleRetrieverError?(err: Error, runId: string, parentRunId?: string, tags?: string[]): Promise<any> | any;\n    handleCustomEvent?(eventName: string, data: any, runId: string, tags?: string[], metadata?: Record<string, any>): Promise<any> | any;\n}\n/**\n * Base interface for callbacks. All methods are optional. If a method is not\n * implemented, it will be ignored. If a method is implemented, it will be\n * called at the appropriate time. All methods are called with the run ID of\n * the LLM/ChatModel/Chain that is running, which is generated by the\n * CallbackManager.\n *\n * @interface\n */\nexport type CallbackHandlerMethods = BaseCallbackHandlerMethodsClass;\n/**\n * Interface for handlers that can indicate a preference for streaming responses.\n * When implemented, this allows the handler to signal whether it prefers to receive\n * streaming responses from language models rather than complete responses.\n */\nexport interface CallbackHandlerPrefersStreaming {\n    readonly lc_prefer_streaming: boolean;\n}\nexport declare function callbackHandlerPrefersStreaming(x: BaseCallbackHandler): unknown;\n/**\n * Abstract base class for creating callback handlers in the LangChain\n * framework. It provides a set of optional methods that can be overridden\n * in derived classes to handle various events during the execution of a\n * LangChain application.\n */\nexport declare abstract class BaseCallbackHandler extends BaseCallbackHandlerMethodsClass implements BaseCallbackHandlerInput, Serializable {\n    lc_serializable: boolean;\n    get lc_namespace(): [\"langchain_core\", \"callbacks\", string];\n    get lc_secrets(): {\n        [key: string]: string;\n    } | undefined;\n    get lc_attributes(): {\n        [key: string]: string;\n    } | undefined;\n    get lc_aliases(): {\n        [key: string]: string;\n    } | undefined;\n    get lc_serializable_keys(): string[] | undefined;\n    /**\n     * The name of the serializable. Override to provide an alias or\n     * to preserve the serialized module name in minified environments.\n     *\n     * Implemented as a static method to support loading logic.\n     */\n    static lc_name(): string;\n    /**\n     * The final serialized identifier for the module.\n     */\n    get lc_id(): string[];\n    lc_kwargs: SerializedFields;\n    abstract name: string;\n    ignoreLLM: boolean;\n    ignoreChain: boolean;\n    ignoreAgent: boolean;\n    ignoreRetriever: boolean;\n    ignoreCustomEvent: boolean;\n    raiseError: boolean;\n    awaitHandlers: boolean;\n    constructor(input?: BaseCallbackHandlerInput);\n    copy(): BaseCallbackHandler;\n    toJSON(): Serialized;\n    toJSONNotImplemented(): SerializedNotImplemented;\n    static fromMethods(methods: CallbackHandlerMethods): {\n        name: string;\n        /**\n         * Called at the start of an LLM or Chat Model run, with the prompt(s)\n         * and the run ID.\n         */\n        handleLLMStart?(llm: Serialized, prompts: string[], runId: string, parentRunId?: string | undefined, extraParams?: Record<string, unknown> | undefined, tags?: string[] | undefined, metadata?: Record<string, unknown> | undefined, runName?: string | undefined): any;\n        /**\n         * Called when an LLM/ChatModel in `streaming` mode produces a new token\n         */\n        handleLLMNewToken?(token: string, idx: NewTokenIndices, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, fields?: HandleLLMNewTokenCallbackFields | undefined): any;\n        /**\n         * Called if an LLM/ChatModel run encounters an error\n         */\n        handleLLMError?(err: any, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, extraParams?: Record<string, unknown> | undefined): any;\n        /**\n         * Called at the end of an LLM/ChatModel run, with the output and the run ID.\n         */\n        handleLLMEnd?(output: LLMResult, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, extraParams?: Record<string, unknown> | undefined): any;\n        /**\n         * Called at the start of a Chat Model run, with the prompt(s)\n         * and the run ID.\n         */\n        handleChatModelStart?(llm: Serialized, messages: BaseMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>, import(\"../messages/message.js\").MessageType>[][], runId: string, parentRunId?: string | undefined, extraParams?: Record<string, unknown> | undefined, tags?: string[] | undefined, metadata?: Record<string, unknown> | undefined, runName?: string | undefined): any;\n        /**\n         * Called at the start of a Chain run, with the chain name and inputs\n         * and the run ID.\n         */\n        handleChainStart?(chain: Serialized, inputs: ChainValues, runId: string, runType?: string | undefined, tags?: string[] | undefined, metadata?: Record<string, unknown> | undefined, runName?: string | undefined, parentRunId?: string | undefined, extra?: Record<string, unknown> | undefined): any;\n        /**\n         * Called if a Chain run encounters an error\n         */\n        handleChainError?(err: any, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, kwargs?: {\n            inputs?: Record<string, unknown> | undefined;\n        } | undefined): any;\n        /**\n         * Called at the end of a Chain run, with the outputs and the run ID.\n         */\n        handleChainEnd?(outputs: ChainValues, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, kwargs?: {\n            inputs?: Record<string, unknown> | undefined;\n        } | undefined): any;\n        /**\n         * Called at the start of a Tool run, with the tool name and input\n         * and the run ID.\n         */\n        handleToolStart?(tool: Serialized, input: string, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, metadata?: Record<string, unknown> | undefined, runName?: string | undefined): any;\n        /**\n         * Called if a Tool run encounters an error\n         */\n        handleToolError?(err: any, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): any;\n        /**\n         * Called at the end of a Tool run, with the tool output and the run ID.\n         */\n        handleToolEnd?(output: any, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): any;\n        handleText?(text: string, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): void | Promise<void>;\n        /**\n         * Called when an agent is about to execute an action,\n         * with the action and the run ID.\n         */\n        handleAgentAction?(action: AgentAction, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): void | Promise<void>;\n        /**\n         * Called when an agent finishes execution, before it exits.\n         * with the final output and the run ID.\n         */\n        handleAgentEnd?(action: AgentFinish, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): void | Promise<void>;\n        handleRetrieverStart?(retriever: Serialized, query: string, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, metadata?: Record<string, unknown> | undefined, name?: string | undefined): any;\n        handleRetrieverEnd?(documents: DocumentInterface<Record<string, any>>[], runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): any;\n        handleRetrieverError?(err: any, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): any;\n        handleCustomEvent?(eventName: string, data: any, runId: string, tags?: string[] | undefined, metadata?: Record<string, any> | undefined): any;\n        lc_serializable: boolean;\n        get lc_namespace(): [\"langchain_core\", \"callbacks\", string];\n        get lc_secrets(): {\n            [key: string]: string;\n        } | undefined;\n        get lc_attributes(): {\n            [key: string]: string;\n        } | undefined;\n        get lc_aliases(): {\n            [key: string]: string;\n        } | undefined;\n        get lc_serializable_keys(): string[] | undefined;\n        /**\n         * The final serialized identifier for the module.\n         */\n        get lc_id(): string[];\n        lc_kwargs: SerializedFields;\n        ignoreLLM: boolean;\n        ignoreChain: boolean;\n        ignoreAgent: boolean;\n        ignoreRetriever: boolean;\n        ignoreCustomEvent: boolean;\n        raiseError: boolean;\n        awaitHandlers: boolean;\n        copy(): BaseCallbackHandler;\n        toJSON(): Serialized;\n        toJSONNotImplemented(): SerializedNotImplemented;\n    };\n}\nexport declare const isBaseCallbackHandler: (x: unknown) => boolean;\nexport {};\n//# sourceMappingURL=base.d.ts.map"],"mappings":";;;;;;;;;;KAOKY,KAAAA;;;AAD6D;AAOlE;AAaA;AAIYG,UAjBKF,wBAAAA,CAiB0B;EAQpBG,SAAAA,CAAAA,EAAAA,OAAAA;EAKER,WAAAA,CAAAA,EAAAA,OAAAA;EAAkFS,WAAAA,CAAAA,EAAAA,OAAAA;EAAqDA,eAAAA,CAAAA,EAAAA,OAAAA;EAA4CC,iBAAAA,CAAAA,EAAAA,OAAAA;EAWnMJ,aAAAA,CAAAA,EAAAA,OAAAA;EAAgFC,UAAAA,CAAAA,EAAAA,OAAAA;;;;;;AAQgBE,UApCxFH,eAAAA,CAoCwFG;EAA0BC,MAAAA,EAAAA,MAAAA;EAKpGV,UAAAA,EAAAA,MAAAA;;AAA0FS,KArC7GF,+BAAAA,GAqC6GE;EAAqDA,KAAAA,CAAAA,EApClKZ,eAoCkKY,GApChJb,mBAoCgJa;CAA4CC;;;;;;uBA7BnMF,+BAAAA,CAsCIJ;EACVK;;;;EAOTC,cAAAA,CAAAA,CAAAA,GAAAA,EAzCiBV,UAyCjBU,EAAAA,OAAAA,EAAAA,MAAAA,EAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAzCmGD,MAyCnGC,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,QAAAA,CAAAA,EAzCwJD,MAyCxJC,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAAAA,OAAAA,CAAAA,EAAAA,MAAAA,CAAAA,EAzCoMA,OAyCpMA,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAKmBV;;;EAIDI,iBAAAA,CAAAA,CAAAA,KAAAA,EAAAA,MAAAA;EAA8DM;;;;;;EAeQA,GAAAA,EAtDvFJ,eAsDuFI,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,MAAAA,CAAAA,EAtDPH,+BAsDOG,CAAAA,EAtD2BA,OAsD3BA,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAC3DV;;;EACFG,cAAAA,CAAAA,CAAAA,GAAAA,EApDVC,KAoDUD,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,WAAAA,CAAAA,EApDiEM,MAoDjEN,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,CAAAA,EApD2FO,OAoD3FP,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAA4EO;;;EAEfD,YAAAA,CAAAA,CAAAA,MAAAA,EAlDtEX,SAkDsEW,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,WAAAA,CAAAA,EAlDSA,MAkDTA,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,CAAAA,EAlDmCC,OAkDnCD,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAAsBC;AAAO;AAW7H;AAMA;EAGwBG,oBAAAA,CAAAA,CAAAA,GAAAA,EAjEOb,UAiEwB,EAAA,QAAIc,EAjENrB,WAiEMqB,EAAAA,EAAAA,EAAmB,KAAA,EAAA,MAAA,EAAA,WAAA,CAAA,EAAA,MAAA,EAAA,WAAA,CAAA,EAjE2CL,MAiE3C,CAAA,MAAA,EAAA,OAAA,CAAA,EAAA,IAAA,CAAA,EAAA,MAAA,EAAA,EAAA,QAAA,CAAA,EAjEgGA,MAiEhG,CAAA,MAAA,EAAA,OAAA,CAAA,EAAA,OAAA,CAAA,EAAA,MAAA,CAAA,EAjE4IC,OAiE5I,CAAA,GAAA,CAAA,GAAA,GAAA;EAOhDI;;;;EAmChBd,gBAAAA,CAAAA,CAAAA,KAAAA,EAtGeA,UAsGfA,EAAAA,MAAAA,EAtGmCR,WAsGnCQ,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,QAAAA,CAAAA,EAtG6GS,MAsG7GT,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAAAA,OAAAA,CAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,KAAAA,CAAAA,EAtGsLS,MAsGtLT,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,CAAAA,EAtGgNU,OAsGhNV,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EACcC;;;EAO+FQ,gBAAAA,CAAAA,CAAAA,GAAAA,EA1GhGL,KA0GgGK,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,MAI5EH,CAJ4EG,EAAAA;IAA6EA,MAAAA,CAAAA,EAzGvLA,MAyGuLA,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA;EAIzJH,CAAAA,CAAAA,EA5GvCI,OA4GuCJ,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAAwGC;;;EAQlBE,cAAAA,CAAAA,CAAAA,OAAAA,EAhHxGjB,WAgHwGiB,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,OAAAA,EAAAA;IAKlGT,MAAAA,CAAAA,EApHlBS,MAoHkBT,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA;MAnH3BU;;;;;EAmHgWD,eAAAA,CAAAA,CAAAA,IAAAA,EA9G7UT,UA8G6US,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,QAAAA,CAAAA,EA9GjPA,MA8GiPA,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAAAA,OAAAA,CAAAA,EAAAA,MAAAA,CAAAA,EA9GrMC,OA8GqMD,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAKvUT;;;EAAmOS,eAAAA,CAAAA,CAAAA,GAAAA,EA/G1OL,KA+G0OK,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EA/G5KC,OA+G4KD,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAK/OA;;;EAYUT,aAAAA,CAAAA,CAAAA,MAAAA,EAAAA,GAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EA5HwDU,OA4HxDV,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAAoHS,UAAAA,CAAAA,CAAAA,IAAAA,EAAAA,MAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EA3H9DC,OA2H8DD,CAAAA,IAAAA,CAAAA,GAAAA,IAAAA;EAS3BC;;;;EAUWA,iBAAAA,CAAAA,CAAAA,MAAAA,EAzIpGhB,WAyIoGgB,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EAzIhCA,OAyIgCA,CAAAA,IAAAA,CAAAA,GAAAA,IAAAA;EAC1FV;;;;EAGuES,cAAAA,CAAAA,CAAAA,MAAAA,EAxIpFd,WAwIoFc,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EAxIhBC,OAwIgBD,CAAAA,IAAAA,CAAAA,GAAAA,IAAAA;EAiB7FP,oBAAAA,CAAAA,CAAAA,SAAAA,EAxJkBF,UAwJlBE,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,QAAAA,CAAAA,EAxJ8GO,MAwJ9GP,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,CAAAA,EAxJuJQ,OAwJvJR,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAQHY,kBAAAA,CAAAA,CAAAA,SAAAA,EA/JmBX,iBA+JnBW,EAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EA/J+FJ,OA+J/FI,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EACEd,oBAAAA,CAAAA,CAAAA,GAAAA,EA/JaI,KA+JbJ,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EA/J2EU,OA+J3EV,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EACcC,iBAAAA,CAAAA,CAAAA,SAAAA,EAAAA,MAAAA,EAAAA,IAAAA,EAAAA,GAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,QAAAA,CAAAA,EA/JgEQ,MA+JhER,CAAAA,MAAAA,EAAAA,GAAAA,CAAAA,CAAAA,EA/JsFS,OA+JtFT,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;;;;AApI2G;AAuI3I;;;;;;KAvJYU,sBAAAA,GAAyBH;;;;;;UAMpBI,+BAAAA;;;iBAGOC,+BAAAA,IAAmCC;;;;;;;uBAO7BA,mBAAAA,SAA4BN,+BAAAA,YAA2CH,0BAA0BN;;;;;;;;;;;;;;;;;;;;;;;;aAwBhHG;;;;;;;;;sBASSG;UACZS;YACEd;0BACcC;8BACIU;;;;;;yBAMHX,8FAA8FS,6EAA6EA;;;;2CAIzJH,wGAAwGC;;;;0HAIzBE;;;;0BAIhGX,uGAAuGW;;;;;+BAKlGT,sBAAsBP,+HAAkOgB,6EAA6EA;;;;;6BAKvUT,oBAAoBR,kGAAkGiB,6GAA6GA;;;;;eAK/OA;;;;;6BAKYjB;eACZiB;;;;;;2BAMUT,oHAAoHS;;;;;;;;;oHAS3BC;;;;;+BAKrFhB,mGAAmGgB;;;;;4BAKtGf,mGAAmGe;qCAC1FV,oHAAoHS;mCACtHN,kBAAkBM;;4GAEuDA;;;;;;;;;;;;;;;;;eAiB7FP;;;;;;;;YAQHY;cACEd;4BACcC;;;cAGXkB"}
+{"version":3,"file":"base.d.cts","names":["ChainValues","BaseMessage","AgentAction","AgentFinish","ChatGenerationChunk","GenerationChunk","LLMResult","Serializable","Serialized","SerializedNotImplemented","SerializedFields","DocumentInterface","Error","BaseCallbackHandlerInput","NewTokenIndices","HandleLLMNewTokenCallbackFields","BaseCallbackHandlerMethodsClass","Record","Promise","CallbackHandlerMethods","CallbackHandlerPrefersStreaming","callbackHandlerPrefersStreaming","BaseCallbackHandler","___messages_message_js11","MessageToolSet","MessageStructure","MessageType","isBaseCallbackHandler"],"sources":["../../src/callbacks/base.d.ts"],"sourcesContent":["import type { ChainValues } from \"../utils/types/index.js\";\nimport type { BaseMessage } from \"../messages/base.js\";\nimport type { AgentAction, AgentFinish } from \"../agents.js\";\nimport type { ChatGenerationChunk, GenerationChunk, LLMResult } from \"../outputs.js\";\nimport { Serializable, Serialized, SerializedNotImplemented } from \"../load/serializable.js\";\nimport type { SerializedFields } from \"../load/map_keys.js\";\nimport type { DocumentInterface } from \"../documents/document.js\";\ntype Error = any;\n/**\n * Interface for the input parameters of the BaseCallbackHandler class. It\n * allows to specify which types of events should be ignored by the\n * callback handler.\n */\nexport interface BaseCallbackHandlerInput {\n    ignoreLLM?: boolean;\n    ignoreChain?: boolean;\n    ignoreAgent?: boolean;\n    ignoreRetriever?: boolean;\n    ignoreCustomEvent?: boolean;\n    _awaitHandler?: boolean;\n    raiseError?: boolean;\n}\n/**\n * Interface for the indices of a new token produced by an LLM or Chat\n * Model in streaming mode.\n */\nexport interface NewTokenIndices {\n    prompt: number;\n    completion: number;\n}\nexport type HandleLLMNewTokenCallbackFields = {\n    chunk?: GenerationChunk | ChatGenerationChunk;\n};\n/**\n * Abstract class that provides a set of optional methods that can be\n * overridden in derived classes to handle various events during the\n * execution of a LangChain application.\n */\ndeclare abstract class BaseCallbackHandlerMethodsClass {\n    /**\n     * Called at the start of an LLM or Chat Model run, with the prompt(s)\n     * and the run ID.\n     */\n    handleLLMStart?(llm: Serialized, prompts: string[], runId: string, parentRunId?: string, extraParams?: Record<string, unknown>, tags?: string[], metadata?: Record<string, unknown>, runName?: string): Promise<any> | any;\n    /**\n     * Called when an LLM/ChatModel in `streaming` mode produces a new token\n     */\n    handleLLMNewToken?(token: string, \n    /**\n     * idx.prompt is the index of the prompt that produced the token\n     *   (if there are multiple prompts)\n     * idx.completion is the index of the completion that produced the token\n     *   (if multiple completions per prompt are requested)\n     */\n    idx: NewTokenIndices, runId: string, parentRunId?: string, tags?: string[], fields?: HandleLLMNewTokenCallbackFields): Promise<any> | any;\n    /**\n     * Called if an LLM/ChatModel run encounters an error\n     */\n    handleLLMError?(err: Error, runId: string, parentRunId?: string, tags?: string[], extraParams?: Record<string, unknown>): Promise<any> | any;\n    /**\n     * Called at the end of an LLM/ChatModel run, with the output and the run ID.\n     */\n    handleLLMEnd?(output: LLMResult, runId: string, parentRunId?: string, tags?: string[], extraParams?: Record<string, unknown>): Promise<any> | any;\n    /**\n     * Called at the start of a Chat Model run, with the prompt(s)\n     * and the run ID.\n     */\n    handleChatModelStart?(llm: Serialized, messages: BaseMessage[][], runId: string, parentRunId?: string, extraParams?: Record<string, unknown>, tags?: string[], metadata?: Record<string, unknown>, runName?: string): Promise<any> | any;\n    /**\n     * Called at the start of a Chain run, with the chain name and inputs\n     * and the run ID.\n     */\n    handleChainStart?(chain: Serialized, inputs: ChainValues, runId: string, runType?: string, tags?: string[], metadata?: Record<string, unknown>, runName?: string, parentRunId?: string, extra?: Record<string, unknown>): Promise<any> | any;\n    /**\n     * Called if a Chain run encounters an error\n     */\n    handleChainError?(err: Error, runId: string, parentRunId?: string, tags?: string[], kwargs?: {\n        inputs?: Record<string, unknown>;\n    }): Promise<any> | any;\n    /**\n     * Called at the end of a Chain run, with the outputs and the run ID.\n     */\n    handleChainEnd?(outputs: ChainValues, runId: string, parentRunId?: string, tags?: string[], kwargs?: {\n        inputs?: Record<string, unknown>;\n    }): Promise<any> | any;\n    /**\n     * Called at the start of a Tool run, with the tool name and input\n     * and the run ID.\n     */\n    handleToolStart?(tool: Serialized, input: string, runId: string, parentRunId?: string, tags?: string[], metadata?: Record<string, unknown>, runName?: string): Promise<any> | any;\n    /**\n     * Called if a Tool run encounters an error\n     */\n    handleToolError?(err: Error, runId: string, parentRunId?: string, tags?: string[]): Promise<any> | any;\n    /**\n     * Called at the end of a Tool run, with the tool output and the run ID.\n     */\n    handleToolEnd?(output: any, runId: string, parentRunId?: string, tags?: string[]): Promise<any> | any;\n    handleText?(text: string, runId: string, parentRunId?: string, tags?: string[]): Promise<void> | void;\n    /**\n     * Called when an agent is about to execute an action,\n     * with the action and the run ID.\n     */\n    handleAgentAction?(action: AgentAction, runId: string, parentRunId?: string, tags?: string[]): Promise<void> | void;\n    /**\n     * Called when an agent finishes execution, before it exits.\n     * with the final output and the run ID.\n     */\n    handleAgentEnd?(action: AgentFinish, runId: string, parentRunId?: string, tags?: string[]): Promise<void> | void;\n    handleRetrieverStart?(retriever: Serialized, query: string, runId: string, parentRunId?: string, tags?: string[], metadata?: Record<string, unknown>, name?: string): Promise<any> | any;\n    handleRetrieverEnd?(documents: DocumentInterface[], runId: string, parentRunId?: string, tags?: string[]): Promise<any> | any;\n    handleRetrieverError?(err: Error, runId: string, parentRunId?: string, tags?: string[]): Promise<any> | any;\n    handleCustomEvent?(eventName: string, data: any, runId: string, tags?: string[], metadata?: Record<string, any>): Promise<any> | any;\n}\n/**\n * Base interface for callbacks. All methods are optional. If a method is not\n * implemented, it will be ignored. If a method is implemented, it will be\n * called at the appropriate time. All methods are called with the run ID of\n * the LLM/ChatModel/Chain that is running, which is generated by the\n * CallbackManager.\n *\n * @interface\n */\nexport type CallbackHandlerMethods = BaseCallbackHandlerMethodsClass;\n/**\n * Interface for handlers that can indicate a preference for streaming responses.\n * When implemented, this allows the handler to signal whether it prefers to receive\n * streaming responses from language models rather than complete responses.\n */\nexport interface CallbackHandlerPrefersStreaming {\n    readonly lc_prefer_streaming: boolean;\n}\nexport declare function callbackHandlerPrefersStreaming(x: BaseCallbackHandler): unknown;\n/**\n * Abstract base class for creating callback handlers in the LangChain\n * framework. It provides a set of optional methods that can be overridden\n * in derived classes to handle various events during the execution of a\n * LangChain application.\n */\nexport declare abstract class BaseCallbackHandler extends BaseCallbackHandlerMethodsClass implements BaseCallbackHandlerInput, Serializable {\n    lc_serializable: boolean;\n    get lc_namespace(): [\"langchain_core\", \"callbacks\", string];\n    get lc_secrets(): {\n        [key: string]: string;\n    } | undefined;\n    get lc_attributes(): {\n        [key: string]: string;\n    } | undefined;\n    get lc_aliases(): {\n        [key: string]: string;\n    } | undefined;\n    get lc_serializable_keys(): string[] | undefined;\n    /**\n     * The name of the serializable. Override to provide an alias or\n     * to preserve the serialized module name in minified environments.\n     *\n     * Implemented as a static method to support loading logic.\n     */\n    static lc_name(): string;\n    /**\n     * The final serialized identifier for the module.\n     */\n    get lc_id(): string[];\n    lc_kwargs: SerializedFields;\n    abstract name: string;\n    ignoreLLM: boolean;\n    ignoreChain: boolean;\n    ignoreAgent: boolean;\n    ignoreRetriever: boolean;\n    ignoreCustomEvent: boolean;\n    raiseError: boolean;\n    awaitHandlers: boolean;\n    constructor(input?: BaseCallbackHandlerInput);\n    copy(): BaseCallbackHandler;\n    toJSON(): Serialized;\n    toJSONNotImplemented(): SerializedNotImplemented;\n    static fromMethods(methods: CallbackHandlerMethods): {\n        name: string;\n        /**\n         * Called at the start of an LLM or Chat Model run, with the prompt(s)\n         * and the run ID.\n         */\n        handleLLMStart?(llm: Serialized, prompts: string[], runId: string, parentRunId?: string | undefined, extraParams?: Record<string, unknown> | undefined, tags?: string[] | undefined, metadata?: Record<string, unknown> | undefined, runName?: string | undefined): any;\n        /**\n         * Called when an LLM/ChatModel in `streaming` mode produces a new token\n         */\n        handleLLMNewToken?(token: string, idx: NewTokenIndices, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, fields?: HandleLLMNewTokenCallbackFields | undefined): any;\n        /**\n         * Called if an LLM/ChatModel run encounters an error\n         */\n        handleLLMError?(err: any, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, extraParams?: Record<string, unknown> | undefined): any;\n        /**\n         * Called at the end of an LLM/ChatModel run, with the output and the run ID.\n         */\n        handleLLMEnd?(output: LLMResult, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, extraParams?: Record<string, unknown> | undefined): any;\n        /**\n         * Called at the start of a Chat Model run, with the prompt(s)\n         * and the run ID.\n         */\n        handleChatModelStart?(llm: Serialized, messages: BaseMessage<import(\"../messages/message.js\").MessageStructure<import(\"../messages/message.js\").MessageToolSet>, import(\"../messages/message.js\").MessageType>[][], runId: string, parentRunId?: string | undefined, extraParams?: Record<string, unknown> | undefined, tags?: string[] | undefined, metadata?: Record<string, unknown> | undefined, runName?: string | undefined): any;\n        /**\n         * Called at the start of a Chain run, with the chain name and inputs\n         * and the run ID.\n         */\n        handleChainStart?(chain: Serialized, inputs: ChainValues, runId: string, runType?: string | undefined, tags?: string[] | undefined, metadata?: Record<string, unknown> | undefined, runName?: string | undefined, parentRunId?: string | undefined, extra?: Record<string, unknown> | undefined): any;\n        /**\n         * Called if a Chain run encounters an error\n         */\n        handleChainError?(err: any, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, kwargs?: {\n            inputs?: Record<string, unknown> | undefined;\n        } | undefined): any;\n        /**\n         * Called at the end of a Chain run, with the outputs and the run ID.\n         */\n        handleChainEnd?(outputs: ChainValues, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, kwargs?: {\n            inputs?: Record<string, unknown> | undefined;\n        } | undefined): any;\n        /**\n         * Called at the start of a Tool run, with the tool name and input\n         * and the run ID.\n         */\n        handleToolStart?(tool: Serialized, input: string, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, metadata?: Record<string, unknown> | undefined, runName?: string | undefined): any;\n        /**\n         * Called if a Tool run encounters an error\n         */\n        handleToolError?(err: any, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): any;\n        /**\n         * Called at the end of a Tool run, with the tool output and the run ID.\n         */\n        handleToolEnd?(output: any, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): any;\n        handleText?(text: string, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): void | Promise<void>;\n        /**\n         * Called when an agent is about to execute an action,\n         * with the action and the run ID.\n         */\n        handleAgentAction?(action: AgentAction, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): void | Promise<void>;\n        /**\n         * Called when an agent finishes execution, before it exits.\n         * with the final output and the run ID.\n         */\n        handleAgentEnd?(action: AgentFinish, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): void | Promise<void>;\n        handleRetrieverStart?(retriever: Serialized, query: string, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined, metadata?: Record<string, unknown> | undefined, name?: string | undefined): any;\n        handleRetrieverEnd?(documents: DocumentInterface<Record<string, any>>[], runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): any;\n        handleRetrieverError?(err: any, runId: string, parentRunId?: string | undefined, tags?: string[] | undefined): any;\n        handleCustomEvent?(eventName: string, data: any, runId: string, tags?: string[] | undefined, metadata?: Record<string, any> | undefined): any;\n        lc_serializable: boolean;\n        get lc_namespace(): [\"langchain_core\", \"callbacks\", string];\n        get lc_secrets(): {\n            [key: string]: string;\n        } | undefined;\n        get lc_attributes(): {\n            [key: string]: string;\n        } | undefined;\n        get lc_aliases(): {\n            [key: string]: string;\n        } | undefined;\n        get lc_serializable_keys(): string[] | undefined;\n        /**\n         * The final serialized identifier for the module.\n         */\n        get lc_id(): string[];\n        lc_kwargs: SerializedFields;\n        ignoreLLM: boolean;\n        ignoreChain: boolean;\n        ignoreAgent: boolean;\n        ignoreRetriever: boolean;\n        ignoreCustomEvent: boolean;\n        raiseError: boolean;\n        awaitHandlers: boolean;\n        copy(): BaseCallbackHandler;\n        toJSON(): Serialized;\n        toJSONNotImplemented(): SerializedNotImplemented;\n    };\n}\nexport declare const isBaseCallbackHandler: (x: unknown) => boolean;\nexport {};\n//# sourceMappingURL=base.d.ts.map"],"mappings":";;;;;;;;;;KAOKY,KAAAA;;;AAD6D;AAOlE;AAaA;AAIYG,UAjBKF,wBAAAA,CAiB0B;EAQpBG,SAAAA,CAAAA,EAAAA,OAAAA;EAKER,WAAAA,CAAAA,EAAAA,OAAAA;EAAkFS,WAAAA,CAAAA,EAAAA,OAAAA;EAAqDA,eAAAA,CAAAA,EAAAA,OAAAA;EAA4CC,iBAAAA,CAAAA,EAAAA,OAAAA;EAWnMJ,aAAAA,CAAAA,EAAAA,OAAAA;EAAgFC,UAAAA,CAAAA,EAAAA,OAAAA;;;;;;AAQgBE,UApCxFH,eAAAA,CAoCwFG;EAA0BC,MAAAA,EAAAA,MAAAA;EAKpGV,UAAAA,EAAAA,MAAAA;;AAA0FS,KArC7GF,+BAAAA,GAqC6GE;EAAqDA,KAAAA,CAAAA,EApClKZ,eAoCkKY,GApChJb,mBAoCgJa;CAA4CC;;;;;;uBA7BnMF,+BAAAA,CAsCIJ;EACVK;;;;EAOTC,cAAAA,CAAAA,CAAAA,GAAAA,EAzCiBV,UAyCjBU,EAAAA,OAAAA,EAAAA,MAAAA,EAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAzCmGD,MAyCnGC,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,QAAAA,CAAAA,EAzCwJD,MAyCxJC,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAAAA,OAAAA,CAAAA,EAAAA,MAAAA,CAAAA,EAzCoMA,OAyCpMA,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAKmBV;;;EAIDI,iBAAAA,CAAAA,CAAAA,KAAAA,EAAAA,MAAAA;EAA8DM;;;;;;EAeQA,GAAAA,EAtDvFJ,eAsDuFI,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,MAAAA,CAAAA,EAtDPH,+BAsDOG,CAAAA,EAtD2BA,OAsD3BA,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAC3DV;;;EACFG,cAAAA,CAAAA,CAAAA,GAAAA,EApDVC,KAoDUD,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,WAAAA,CAAAA,EApDiEM,MAoDjEN,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,CAAAA,EApD2FO,OAoD3FP,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAA4EO;;;EAEfD,YAAAA,CAAAA,CAAAA,MAAAA,EAlDtEX,SAkDsEW,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,WAAAA,CAAAA,EAlDSA,MAkDTA,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,CAAAA,EAlDmCC,OAkDnCD,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAAsBC;AAAO;AAW7H;AAMA;EAGwBG,oBAAAA,CAAAA,CAAAA,GAAAA,EAjEOb,UAiEwB,EAAA,QAAIc,EAjENrB,WAiEMqB,EAAAA,EAAAA,EAAmB,KAAA,EAAA,MAAA,EAAA,WAAA,CAAA,EAAA,MAAA,EAAA,WAAA,CAAA,EAjE2CL,MAiE3C,CAAA,MAAA,EAAA,OAAA,CAAA,EAAA,IAAA,CAAA,EAAA,MAAA,EAAA,EAAA,QAAA,CAAA,EAjEgGA,MAiEhG,CAAA,MAAA,EAAA,OAAA,CAAA,EAAA,OAAA,CAAA,EAAA,MAAA,CAAA,EAjE4IC,OAiE5I,CAAA,GAAA,CAAA,GAAA,GAAA;EAOhDI;;;;EAmChBd,gBAAAA,CAAAA,CAAAA,KAAAA,EAtGeA,UAsGfA,EAAAA,MAAAA,EAtGmCR,WAsGnCQ,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,QAAAA,CAAAA,EAtG6GS,MAsG7GT,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAAAA,OAAAA,CAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,KAAAA,CAAAA,EAtGsLS,MAsGtLT,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,CAAAA,EAtGgNU,OAsGhNV,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EACcC;;;EAO+FQ,gBAAAA,CAAAA,CAAAA,GAAAA,EA1GhGL,KA0GgGK,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,MAI5EH,CAJ4EG,EAAAA;IAA6EA,MAAAA,CAAAA,EAzGvLA,MAyGuLA,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA;EAIzJH,CAAAA,CAAAA,EA5GvCI,OA4GuCJ,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAAwGC;;;EAQlBE,cAAAA,CAAAA,CAAAA,OAAAA,EAhHxGjB,WAgHwGiB,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,OAAAA,EAAAA;IAKlGT,MAAAA,CAAAA,EApHlBS,MAoHkBT,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA;MAnH3BU;;;;;EAmHgWD,eAAAA,CAAAA,CAAAA,IAAAA,EA9G7UT,UA8G6US,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,QAAAA,CAAAA,EA9GjPA,MA8GiPA,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAAAA,OAAAA,CAAAA,EAAAA,MAAAA,CAAAA,EA9GrMC,OA8GqMD,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAKvUT;;;EAAmOS,eAAAA,CAAAA,CAAAA,GAAAA,EA/G1OL,KA+G0OK,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EA/G5KC,OA+G4KD,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAK/OA;;;EAYUT,aAAAA,CAAAA,CAAAA,MAAAA,EAAAA,GAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EA5HwDU,OA4HxDV,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAAoHS,UAAAA,CAAAA,CAAAA,IAAAA,EAAAA,MAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EA3H9DC,OA2H8DD,CAAAA,IAAAA,CAAAA,GAAAA,IAAAA;EAS3BC;;;;EAUWA,iBAAAA,CAAAA,CAAAA,MAAAA,EAzIpGhB,WAyIoGgB,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EAzIhCA,OAyIgCA,CAAAA,IAAAA,CAAAA,GAAAA,IAAAA;EAC1FV;;;;EAGuES,cAAAA,CAAAA,CAAAA,MAAAA,EAxIpFd,WAwIoFc,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EAxIhBC,OAwIgBD,CAAAA,IAAAA,CAAAA,GAAAA,IAAAA;EAiB7FP,oBAAAA,CAAAA,CAAAA,SAAAA,EAxJkBF,UAwJlBE,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,QAAAA,CAAAA,EAxJ8GO,MAwJ9GP,CAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,CAAAA,EAxJuJQ,OAwJvJR,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EAQHY,kBAAAA,CAAAA,CAAAA,SAAAA,EA/JmBX,iBA+JnBW,EAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EA/J+FJ,OA+J/FI,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EACEd,oBAAAA,CAAAA,CAAAA,GAAAA,EA/JaI,KA+JbJ,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,CAAAA,EA/J2EU,OA+J3EV,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;EACcC,iBAAAA,CAAAA,CAAAA,SAAAA,EAAAA,MAAAA,EAAAA,IAAAA,EAAAA,GAAAA,EAAAA,KAAAA,EAAAA,MAAAA,EAAAA,IAAAA,CAAAA,EAAAA,MAAAA,EAAAA,EAAAA,QAAAA,CAAAA,EA/JgEQ,MA+JhER,CAAAA,MAAAA,EAAAA,GAAAA,CAAAA,CAAAA,EA/JsFS,OA+JtFT,CAAAA,GAAAA,CAAAA,GAAAA,GAAAA;;;;AApI2G;AAuI3I;;;;;;KAvJYU,sBAAAA,GAAyBH;;;;;;UAMpBI,+BAAAA;;;iBAGOC,+BAAAA,IAAmCC;;;;;;;uBAO7BA,mBAAAA,SAA4BN,+BAAAA,YAA2CH,0BAA0BN;;;;;;;;;;;;;;;;;;;;;;;;aAwBhHG;;;;;;;;;sBASSG;UACZS;YACEd;0BACcC;8BACIU;;;;;;yBAMHX,8FAA8FS,6EAA6EA;;;;2CAIzJH,wGAAwGC;;;;0HAIzBE;;;;0BAIhGX,uGAAuGW;;;;;+BAKlGT,sBAAsBP,+HAAkOgB,6EAA6EA;;;;;6BAKvUT,oBAAoBR,kGAAkGiB,6GAA6GA;;;;;eAK/OA;;;;;6BAKYjB;eACZiB;;;;;;2BAMUT,oHAAoHS;;;;;;;;;oHAS3BC;;;;;+BAKrFhB,mGAAmGgB;;;;;4BAKtGf,mGAAmGe;qCAC1FV,oHAAoHS;mCACtHN,kBAAkBM;;4GAEuDA;;;;;;;;;;;;;;;;;eAiB7FP;;;;;;;;YAQHY;cACEd;4BACcC;;;cAGXkB"}

package/dist/language_models/chat_models.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"chat_models.d.cts","names":["ZodType","ZodTypeV3","$ZodType","ZodTypeV4","BaseMessage","BaseMessageChunk","BaseMessageLike","AIMessageChunk","MessageOutputVersion","BasePromptValueInterface","LLMResult","ChatGenerationChunk","ChatResult","Generation","BaseLanguageModel","StructuredOutputMethodOptions","ToolDefinition","BaseLanguageModelCallOptions","BaseLanguageModelInput","BaseLanguageModelParams","CallbackManagerForLLMRun","Callbacks","RunnableConfig","BaseCache","StructuredToolInterface","StructuredToolParams","Runnable","RunnableToolLike","ToolChoice","Record","SerializedChatModel","SerializedLLM","BaseChatModelParams","BaseChatModelCallOptions","LangSmithParams","Array","BindToolsInput","BaseChatModel","RunOutput","CallOptions","OutputMessageType","Exclude","Omit","Partial","Promise","AsyncGenerator","messages","cache","llmStringKey","parsedOptions","handledOptions","SimpleChatModel"],"sources":["../../src/language_models/chat_models.d.ts"],"sourcesContent":["import type { ZodType as ZodTypeV3 } from \"zod/v3\";\nimport type { $ZodType as ZodTypeV4 } from \"zod/v4/core\";\nimport { type BaseMessage, BaseMessageChunk, type BaseMessageLike, AIMessageChunk, MessageOutputVersion } from \"../messages/index.js\";\nimport type { BasePromptValueInterface } from \"../prompt_values.js\";\nimport { LLMResult, ChatGenerationChunk, type ChatResult, type Generation } from \"../outputs.js\";\nimport { BaseLanguageModel, type StructuredOutputMethodOptions, type ToolDefinition, type BaseLanguageModelCallOptions, type BaseLanguageModelInput, type BaseLanguageModelParams } from \"./base.js\";\nimport { type CallbackManagerForLLMRun, type Callbacks } from \"../callbacks/manager.js\";\nimport type { RunnableConfig } from \"../runnables/config.js\";\nimport type { BaseCache } from \"../caches/index.js\";\nimport { StructuredToolInterface, StructuredToolParams } from \"../tools/index.js\";\nimport { Runnable, RunnableToolLike } from \"../runnables/base.js\";\nexport type ToolChoice = string | Record<string, any> | \"auto\" | \"any\";\n/**\n * Represents a serialized chat model.\n */\nexport type SerializedChatModel = {\n    _model: string;\n    _type: string;\n} & Record<string, any>;\n/**\n * Represents a serialized large language model.\n */\nexport type SerializedLLM = {\n    _model: string;\n    _type: string;\n} & Record<string, any>;\n/**\n * Represents the parameters for a base chat model.\n */\nexport type BaseChatModelParams = BaseLanguageModelParams & {\n    /**\n     * Whether to disable streaming.\n     *\n     * If streaming is bypassed, then `stream()` will defer to\n     * `invoke()`.\n     *\n     * - If true, will always bypass streaming case.\n     * - If false (default), will always use streaming case if available.\n     */\n    disableStreaming?: boolean;\n    /**\n     * Version of `AIMessage` output format to store in message content.\n     *\n     * `AIMessage.contentBlocks` will lazily parse the contents of `content` into a\n     * standard format. This flag can be used to additionally store the standard format\n     * as the message content, e.g., for serialization purposes.\n     *\n     * - \"v0\": provider-specific format in content (can lazily parse with `.contentBlocks`)\n     * - \"v1\": standardized format in content (consistent with `.contentBlocks`)\n     *\n     * You can also set `LC_OUTPUT_VERSION` as an environment variable to \"v1\" to\n     * enable this by default.\n     *\n     * @default \"v0\"\n     */\n    outputVersion?: MessageOutputVersion;\n};\n/**\n * Represents the call options for a base chat model.\n */\nexport type BaseChatModelCallOptions = BaseLanguageModelCallOptions & {\n    /**\n     * Specifies how the chat model should use tools.\n     * @default undefined\n     *\n     * Possible values:\n     * - \"auto\": The model may choose to use any of the provided tools, or none.\n     * - \"any\": The model must use one of the provided tools.\n     * - \"none\": The model must not use any tools.\n     * - A string (not \"auto\", \"any\", or \"none\"): The name of a specific tool the model must use.\n     * - An object: A custom schema specifying tool choice parameters. Specific to the provider.\n     *\n     * Note: Not all providers support tool_choice. An error will be thrown\n     * if used with an unsupported model.\n     */\n    tool_choice?: ToolChoice;\n    /**\n     * Version of `AIMessage` output format to store in message content.\n     *\n     * `AIMessage.contentBlocks` will lazily parse the contents of `content` into a\n     * standard format. This flag can be used to additionally store the standard format\n     * as the message content, e.g., for serialization purposes.\n     *\n     * - \"v0\": provider-specific format in content (can lazily parse with `.contentBlocks`)\n     * - \"v1\": standardized format in content (consistent with `.contentBlocks`)\n     *\n     * You can also set `LC_OUTPUT_VERSION` as an environment variable to \"v1\" to\n     * enable this by default.\n     *\n     * @default \"v0\"\n     */\n    outputVersion?: MessageOutputVersion;\n};\nexport type LangSmithParams = {\n    ls_provider?: string;\n    ls_model_name?: string;\n    ls_model_type: \"chat\";\n    ls_temperature?: number;\n    ls_max_tokens?: number;\n    ls_stop?: Array<string>;\n};\nexport type BindToolsInput = StructuredToolInterface | Record<string, any> | ToolDefinition | RunnableToolLike | StructuredToolParams;\n/**\n * Base class for chat models. It extends the BaseLanguageModel class and\n * provides methods for generating chat based on input messages.\n */\nexport declare abstract class BaseChatModel<CallOptions extends BaseChatModelCallOptions = BaseChatModelCallOptions, OutputMessageType extends BaseMessageChunk = AIMessageChunk> extends BaseLanguageModel<OutputMessageType, CallOptions> {\n    ParsedCallOptions: Omit<CallOptions, Exclude<keyof RunnableConfig, \"signal\" | \"timeout\" | \"maxConcurrency\">>;\n    lc_namespace: string[];\n    disableStreaming: boolean;\n    outputVersion?: MessageOutputVersion;\n    get callKeys(): string[];\n    constructor(fields: BaseChatModelParams);\n    _combineLLMOutput?(...llmOutputs: LLMResult[\"llmOutput\"][]): LLMResult[\"llmOutput\"];\n    protected _separateRunnableConfigFromCallOptionsCompat(options?: Partial<CallOptions>): [RunnableConfig, this[\"ParsedCallOptions\"]];\n    /**\n     * Bind tool-like objects to this chat model.\n     *\n     * @param tools A list of tool definitions to bind to this chat model.\n     * Can be a structured tool, an OpenAI formatted tool, or an object\n     * matching the provider's specific tool schema.\n     * @param kwargs Any additional parameters to bind.\n     */\n    bindTools?(tools: BindToolsInput[], kwargs?: Partial<CallOptions>): Runnable<BaseLanguageModelInput, OutputMessageType, CallOptions>;\n    /**\n     * Invokes the chat model with a single input.\n     * @param input The input for the language model.\n     * @param options The call options.\n     * @returns A Promise that resolves to a BaseMessageChunk.\n     */\n    invoke(input: BaseLanguageModelInput, options?: Partial<CallOptions>): Promise<OutputMessageType>;\n    _streamResponseChunks(_messages: BaseMessage[], _options: this[\"ParsedCallOptions\"], _runManager?: CallbackManagerForLLMRun): AsyncGenerator<ChatGenerationChunk>;\n    _streamIterator(input: BaseLanguageModelInput, options?: Partial<CallOptions>): AsyncGenerator<OutputMessageType>;\n    getLsParams(options: this[\"ParsedCallOptions\"]): LangSmithParams;\n    /** @ignore */\n    _generateUncached(messages: BaseMessageLike[][], parsedOptions: this[\"ParsedCallOptions\"], handledOptions: RunnableConfig, startedRunManagers?: CallbackManagerForLLMRun[]): Promise<LLMResult>;\n    _generateCached({ messages, cache, llmStringKey, parsedOptions, handledOptions }: {\n        messages: BaseMessageLike[][];\n        cache: BaseCache<Generation[]>;\n        llmStringKey: string;\n        parsedOptions: any;\n        handledOptions: RunnableConfig;\n    }): Promise<LLMResult & {\n        missingPromptIndices: number[];\n        startedRunManagers?: CallbackManagerForLLMRun[];\n    }>;\n    /**\n     * Generates chat based on the input messages.\n     * @param messages An array of arrays of BaseMessage instances.\n     * @param options The call options or an array of stop sequences.\n     * @param callbacks The callbacks for the language model.\n     * @returns A Promise that resolves to an LLMResult.\n     */\n    generate(messages: BaseMessageLike[][], options?: string[] | Partial<CallOptions>, callbacks?: Callbacks): Promise<LLMResult>;\n    /**\n     * Get the parameters used to invoke the model\n     */\n    invocationParams(_options?: this[\"ParsedCallOptions\"]): any;\n    _modelType(): string;\n    abstract _llmType(): string;\n    /**\n     * Generates a prompt based on the input prompt values.\n     * @param promptValues An array of BasePromptValue instances.\n     * @param options The call options or an array of stop sequences.\n     * @param callbacks The callbacks for the language model.\n     * @returns A Promise that resolves to an LLMResult.\n     */\n    generatePrompt(promptValues: BasePromptValueInterface[], options?: string[] | Partial<CallOptions>, callbacks?: Callbacks): Promise<LLMResult>;\n    abstract _generate(messages: BaseMessage[], options: this[\"ParsedCallOptions\"], runManager?: CallbackManagerForLLMRun): Promise<ChatResult>;\n    withStructuredOutput<RunOutput extends Record<string, any> = Record<string, any>>(outputSchema: ZodTypeV4<RunOutput> | Record<string, any>, config?: StructuredOutputMethodOptions<false>): Runnable<BaseLanguageModelInput, RunOutput>;\n    withStructuredOutput<RunOutput extends Record<string, any> = Record<string, any>>(outputSchema: ZodTypeV4<RunOutput> | Record<string, any>, config?: StructuredOutputMethodOptions<true>): Runnable<BaseLanguageModelInput, {\n        raw: BaseMessage;\n        parsed: RunOutput;\n    }>;\n    withStructuredOutput<RunOutput extends Record<string, any> = Record<string, any>>(outputSchema: ZodTypeV3<RunOutput> | Record<string, any>, config?: StructuredOutputMethodOptions<false>): Runnable<BaseLanguageModelInput, RunOutput>;\n    withStructuredOutput<RunOutput extends Record<string, any> = Record<string, any>>(outputSchema: ZodTypeV3<RunOutput> | Record<string, any>, config?: StructuredOutputMethodOptions<true>): Runnable<BaseLanguageModelInput, {\n        raw: BaseMessage;\n        parsed: RunOutput;\n    }>;\n}\n/**\n * An abstract class that extends BaseChatModel and provides a simple\n * implementation of _generate.\n */\nexport declare abstract class SimpleChatModel<CallOptions extends BaseChatModelCallOptions = BaseChatModelCallOptions> extends BaseChatModel<CallOptions> {\n    abstract _call(messages: BaseMessage[], options: this[\"ParsedCallOptions\"], runManager?: CallbackManagerForLLMRun): Promise<string>;\n    _generate(messages: BaseMessage[], options: this[\"ParsedCallOptions\"], runManager?: CallbackManagerForLLMRun): Promise<ChatResult>;\n}\n//# sourceMappingURL=chat_models.d.ts.map"],"mappings":";;;;;;;;;;;;;;;KAWY4B,UAAAA,YAAsBC;;;;AAAtBD,KAIAE,mBAAAA,GAJ4B;EAI5BA,MAAAA,EAAAA,MAAAA;EAOAC,KAAAA,EAAAA,MAAAA;AAOZ,CAAA,GAXIF,MAWQG,CAAAA,MAAAA,EAAAA,GAAAA,CAAAA;AA+BZ;;;AA+BoBxB,KArERuB,aAAAA,GAqEQvB;EAAoB,MAAA,EAAA,MAAA;EAE5B0B,KAAAA,EAAAA,MAAAA;AAQZ,CAAA,GA5EIL,MA4EQO,CAAAA,MAAAA,EAAAA,GAAc,CAAA;;;;AAAoET,KAxElFK,mBAAAA,GAAsBb,uBAwE4DQ,GAAAA;EAAmBF;AAAoB;AAKrI;;;;;;;EAC4Bc,gBAAAA,CAAAA,EAAAA,OAAAA;EAA2BjB;;;;;;;;;;;;;;;EAgBqEiB,aAAAA,CAAAA,EApExG/B,oBAoEwG+B;CAApDb;;;;AAOWc,KAtEvEP,wBAAAA,GAA2BhB,4BAsE4CuB,GAAAA;EAARI;;;;;;;;;;;;;;EAK8GlC,WAAAA,CAAAA,EA5DvKkB,UA4DuKlB;EAARkC;;;;;;;;;;;;;;;EAkBhHD,aAAAA,CAAAA,EA9D7CnC,oBA8D6CmC;CAAkCtB;AAAoBX,KA5D3GwB,eAAAA,GA4D2GxB;EAARkC,WAAAA,CAAAA,EAAAA,MAAAA;EAc9EnC,aAAAA,CAAAA,EAAAA,MAAAA;EAAyD8B,aAAAA,EAAAA,MAAAA;EAARI,cAAAA,CAAAA,EAAAA,MAAAA;EAAkCtB,aAAAA,CAAAA,EAAAA,MAAAA;EAAoBX,OAAAA,CAAAA,EApE1HyB,KAoE0HzB,CAAAA,MAAAA,CAAAA;CAARkC;AAC/FxC,KAnErBgC,cAAAA,GAAiBZ,uBAmEIpB,GAnEsByB,MAmEtBzB,CAAAA,MAAAA,EAAAA,GAAAA,CAAAA,GAnE4CY,cAmE5CZ,GAnE6DuB,gBAmE7DvB,GAnEgFqB,oBAmEhFrB;;;;;AACgCyB,uBA/DnCQ,aA+DmCR,CAAAA,oBA/DDI,wBA+DCJ,GA/D0BI,wBA+D1BJ,EAAAA,0BA/D8ExB,gBA+D9EwB,GA/DiGtB,cA+DjGsB,CAAAA,SA/DyHf,iBA+DzHe,CA/D2IW,iBA+D3IX,EA/D8JU,WA+D9JV,CAAAA,CAAAA;EAA6CS,iBAAAA,EA9DvFI,IA8DuFJ,CA9DlFC,WA8DkFD,EA9DrEG,OA8DqEH,CAAAA,MA9DvDhB,cA8DuDgB,EAAAA,QAAAA,GAAAA,SAAAA,GAAAA,gBAAAA,CAAAA,CAAAA;EAAVnC,YAAAA,EAAAA,MAAAA,EAAAA;EAAuB0B,gBAAAA,EAAAA,OAAAA;EAA8Bd,aAAAA,CAAAA,EA3DrIP,oBA2DqIO;EAAgDG,IAAAA,QAAAA,CAAAA,CAAAA,EAAAA,MAAAA,EAAAA;EAAwBoB,WAAAA,CAAAA,MAAAA,EAzDzMN,mBAyDyMM;EAAjCZ,iBAAAA,CAAAA,CAAAA,GAAAA,UAAAA,EAxD1JhB,SAwD0JgB,CAAAA,WAAAA,CAAAA,EAAAA,CAAAA,EAxD/HhB,SAwD+HgB,CAAAA,WAAAA,CAAAA;EACrJG,UAAAA,4CAAAA,CAAAA,OAAAA,CAAAA,EAxD0Bc,OAwD1Bd,CAxDkCU,WAwDlCV,CAAAA,CAAAA,EAAAA,CAxDkDP,cAwDlDO,EAAAA,IAAAA,CAAAA,mBAAAA,CAAAA,CAAAA;EAAsBA;;;;;;;;EAA8HH,SAAAA,CAAAA,CAAAA,KAAAA,EA/CzKU,cA+CyKV,EAAAA,EAAAA,MAAAA,CAAAA,EA/C9IiB,OA+C8IjB,CA/CtIa,WA+CsIb,CAAAA,CAAAA,EA/CvHA,QA+CuHA,CA/C9GR,sBA+C8GQ,EA/CtFc,iBA+CsFd,EA/CnEa,WA+CmEb,CAAAA;EAIpJG;;;;;;EAA8JX,MAAAA,CAAAA,KAAAA,EA5CvLA,sBA4CuLA,EAAAA,OAAAA,CAAAA,EA5CrJyB,OA4CqJzB,CA5C7IqB,WA4C6IrB,CAAAA,CAAAA,EA5C9H0B,OA4C8H1B,CA5CtHsB,iBA4CsHtB,CAAAA;EAAwBoB,qBAAAA,CAAAA,SAAAA,EA3C5LlC,WA2C4LkC,EAAAA,EAAAA,QAAAA,EAAAA,IAAAA,CAAAA,mBAAAA,CAAAA,EAAAA,WAAAA,CAAAA,EA3C1HlB,wBA2C0HkB,CAAAA,EA3C/FO,cA2C+FP,CA3ChF3B,mBA2CgF2B,CAAAA;EAAjCZ,eAAAA,CAAAA,KAAAA,EA1CrKR,sBA0CqKQ,EAAAA,OAAAA,CAAAA,EA1CnIiB,OA0CmIjB,CA1C3Ha,WA0C2Hb,CAAAA,CAAAA,EA1C5GmB,cA0C4GnB,CA1C7Fc,iBA0C6Fd,CAAAA;EACrJG,WAAAA,CAAAA,OAAAA,EAAAA,IAAAA,CAAAA,mBAAAA,CAAAA,CAAAA,EA1CUK,eA0CVL;EAAsBA;EAA6CS,iBAAAA,CAAAA,QAAAA,EAxC9EhC,eAwC8EgC,EAAAA,EAAAA,EAAAA,aAAAA,EAAAA,IAAAA,CAAAA,mBAAAA,CAAAA,EAAAA,cAAAA,EAxCChB,cAwCDgB,EAAAA,kBAAAA,CAAAA,EAxCsClB,wBAwCtCkB,EAAAA,CAAAA,EAxCmEM,OAwCnEN,CAxC2E5B,SAwC3E4B,CAAAA;EAAVrC,eAAAA,CAAAA;IAAAA,QAAAA;IAAAA,KAAAA;IAAAA,YAAAA;IAAAA,aAAAA;IAAAA;EAA2FyB,CAA3FzB,EAAAA;IAAuB4B,QAAAA,EAtCzGvB,eAsCyGuB,EAAAA,EAAAA;IAA8Bd,KAAAA,EArC1IQ,SAqC0IR,CArChIF,UAqCgIE,EAAAA,CAAAA;IAA+CG,YAAAA,EAAAA,MAAAA;IAC3Ld,aAAAA,EAAAA,GAAAA;IACGkC,cAAAA,EApCQhB,cAoCRgB;EAF+KZ,CAAAA,CAAAA,EAjCvLkB,OAiCuLlB,CAjC/KhB,SAiC+KgB,GAAAA;IArELZ,oBAAAA,EAAAA,MAAAA,EAAAA;IAAiB,kBAAA,CAAA,EAsC9KM,wBAtC8K,EAAA;EA8E7K+B,CAAAA,CAAAA;EAAoClB;;;;;;;EAEsBb,QAAAA,CAAAA,QAAAA,EAjCjEd,eAiCiEc,EAAAA,EAAAA,EAAAA,OAAAA,CAAAA,EAAAA,MAAAA,EAAAA,GAjCvBuB,OAiCuBvB,CAjCfmB,WAiCenB,CAAAA,EAAAA,SAAAA,CAAAA,EAjCWC,SAiCXD,CAAAA,EAjCuBwB,OAiCvBxB,CAjC+BV,SAiC/BU,CAAAA;EAAmCR;;;EAFiB,gBAAA,CAAA,QAAA,CAAA,EAAA,IAAA,CAAA,mBAAA,CAAA,CAAA,EAAA,GAAA;;;;;;;;;;+BAjB3GH,iDAAiDkC,QAAQJ,0BAA0BlB,YAAYuB,QAAQlC;+BACvGN,gEAAgEgB,2BAA2BwB,QAAQhC;yCACzFiB,sBAAsBA,mCAAmC1B,SAAUmC,aAAaT,8BAA8Bd,uCAAuCW,SAASR,wBAAwBoB;yCACtLT,sBAAsBA,mCAAmC1B,SAAUmC,aAAaT,8BAA8Bd,sCAAsCW,SAASR;SAC3Ld;YACGkC;;yCAE2BT,sBAAsBA,mCAAmC5B,QAAUqC,aAAaT,8BAA8Bd,uCAAuCW,SAASR,wBAAwBoB;yCACtLT,sBAAsBA,mCAAmC5B,QAAUqC,aAAaT,8BAA8Bd,sCAAsCW,SAASR;SAC3Ld;YACGkC;;;;;;;uBAOca,oCAAoClB,2BAA2BA,kCAAkCI,cAAcE;2BAChHnC,gEAAgEgB,2BAA2BwB;sBAChGxC,gEAAgEgB,2BAA2BwB,QAAQhC"}
+{"version":3,"file":"chat_models.d.cts","names":["ZodType","ZodTypeV3","$ZodType","ZodTypeV4","BaseMessage","BaseMessageChunk","BaseMessageLike","AIMessageChunk","MessageOutputVersion","BasePromptValueInterface","LLMResult","ChatGenerationChunk","ChatResult","Generation","BaseLanguageModel","StructuredOutputMethodOptions","ToolDefinition","BaseLanguageModelCallOptions","BaseLanguageModelInput","BaseLanguageModelParams","CallbackManagerForLLMRun","Callbacks","RunnableConfig","BaseCache","StructuredToolInterface","StructuredToolParams","Runnable","RunnableToolLike","ToolChoice","Record","SerializedChatModel","SerializedLLM","BaseChatModelParams","BaseChatModelCallOptions","LangSmithParams","Array","BindToolsInput","BaseChatModel","RunOutput","CallOptions","OutputMessageType","Exclude","Omit","Partial","Promise","AsyncGenerator","messages","cache","llmStringKey","parsedOptions","handledOptions","SimpleChatModel"],"sources":["../../src/language_models/chat_models.d.ts"],"sourcesContent":["import type { ZodType as ZodTypeV3 } from \"zod/v3\";\nimport type { $ZodType as ZodTypeV4 } from \"zod/v4/core\";\nimport { type BaseMessage, BaseMessageChunk, type BaseMessageLike, AIMessageChunk, MessageOutputVersion } from \"../messages/index.js\";\nimport type { BasePromptValueInterface } from \"../prompt_values.js\";\nimport { LLMResult, ChatGenerationChunk, type ChatResult, type Generation } from \"../outputs.js\";\nimport { BaseLanguageModel, type StructuredOutputMethodOptions, type ToolDefinition, type BaseLanguageModelCallOptions, type BaseLanguageModelInput, type BaseLanguageModelParams } from \"./base.js\";\nimport { type CallbackManagerForLLMRun, type Callbacks } from \"../callbacks/manager.js\";\nimport type { RunnableConfig } from \"../runnables/config.js\";\nimport type { BaseCache } from \"../caches/index.js\";\nimport { StructuredToolInterface, StructuredToolParams } from \"../tools/index.js\";\nimport { Runnable, RunnableToolLike } from \"../runnables/base.js\";\nexport type ToolChoice = string | Record<string, any> | \"auto\" | \"any\";\n/**\n * Represents a serialized chat model.\n */\nexport type SerializedChatModel = {\n    _model: string;\n    _type: string;\n} & Record<string, any>;\n/**\n * Represents a serialized large language model.\n */\nexport type SerializedLLM = {\n    _model: string;\n    _type: string;\n} & Record<string, any>;\n/**\n * Represents the parameters for a base chat model.\n */\nexport type BaseChatModelParams = BaseLanguageModelParams & {\n    /**\n     * Whether to disable streaming.\n     *\n     * If streaming is bypassed, then `stream()` will defer to\n     * `invoke()`.\n     *\n     * - If true, will always bypass streaming case.\n     * - If false (default), will always use streaming case if available.\n     */\n    disableStreaming?: boolean;\n    /**\n     * Version of `AIMessage` output format to store in message content.\n     *\n     * `AIMessage.contentBlocks` will lazily parse the contents of `content` into a\n     * standard format. This flag can be used to additionally store the standard format\n     * as the message content, e.g., for serialization purposes.\n     *\n     * - \"v0\": provider-specific format in content (can lazily parse with `.contentBlocks`)\n     * - \"v1\": standardized format in content (consistent with `.contentBlocks`)\n     *\n     * You can also set `LC_OUTPUT_VERSION` as an environment variable to \"v1\" to\n     * enable this by default.\n     *\n     * @default \"v0\"\n     */\n    outputVersion?: MessageOutputVersion;\n};\n/**\n * Represents the call options for a base chat model.\n */\nexport type BaseChatModelCallOptions = BaseLanguageModelCallOptions & {\n    /**\n     * Specifies how the chat model should use tools.\n     * @default undefined\n     *\n     * Possible values:\n     * - \"auto\": The model may choose to use any of the provided tools, or none.\n     * - \"any\": The model must use one of the provided tools.\n     * - \"none\": The model must not use any tools.\n     * - A string (not \"auto\", \"any\", or \"none\"): The name of a specific tool the model must use.\n     * - An object: A custom schema specifying tool choice parameters. Specific to the provider.\n     *\n     * Note: Not all providers support tool_choice. An error will be thrown\n     * if used with an unsupported model.\n     */\n    tool_choice?: ToolChoice;\n    /**\n     * Version of `AIMessage` output format to store in message content.\n     *\n     * `AIMessage.contentBlocks` will lazily parse the contents of `content` into a\n     * standard format. This flag can be used to additionally store the standard format\n     * as the message content, e.g., for serialization purposes.\n     *\n     * - \"v0\": provider-specific format in content (can lazily parse with `.contentBlocks`)\n     * - \"v1\": standardized format in content (consistent with `.contentBlocks`)\n     *\n     * You can also set `LC_OUTPUT_VERSION` as an environment variable to \"v1\" to\n     * enable this by default.\n     *\n     * @default \"v0\"\n     */\n    outputVersion?: MessageOutputVersion;\n};\nexport type LangSmithParams = {\n    ls_provider?: string;\n    ls_model_name?: string;\n    ls_model_type: \"chat\";\n    ls_temperature?: number;\n    ls_max_tokens?: number;\n    ls_stop?: Array<string>;\n};\nexport type BindToolsInput = StructuredToolInterface | Record<string, any> | ToolDefinition | RunnableToolLike | StructuredToolParams;\n/**\n * Base class for chat models. It extends the BaseLanguageModel class and\n * provides methods for generating chat based on input messages.\n */\nexport declare abstract class BaseChatModel<CallOptions extends BaseChatModelCallOptions = BaseChatModelCallOptions, OutputMessageType extends BaseMessageChunk = AIMessageChunk> extends BaseLanguageModel<OutputMessageType, CallOptions> {\n    ParsedCallOptions: Omit<CallOptions, Exclude<keyof RunnableConfig, \"signal\" | \"timeout\" | \"maxConcurrency\">>;\n    lc_namespace: string[];\n    disableStreaming: boolean;\n    outputVersion?: MessageOutputVersion;\n    get callKeys(): string[];\n    constructor(fields: BaseChatModelParams);\n    _combineLLMOutput?(...llmOutputs: LLMResult[\"llmOutput\"][]): LLMResult[\"llmOutput\"];\n    protected _separateRunnableConfigFromCallOptionsCompat(options?: Partial<CallOptions>): [RunnableConfig, this[\"ParsedCallOptions\"]];\n    /**\n     * Bind tool-like objects to this chat model.\n     *\n     * @param tools A list of tool definitions to bind to this chat model.\n     * Can be a structured tool, an OpenAI formatted tool, or an object\n     * matching the provider's specific tool schema.\n     * @param kwargs Any additional parameters to bind.\n     */\n    bindTools?(tools: BindToolsInput[], kwargs?: Partial<CallOptions>): Runnable<BaseLanguageModelInput, OutputMessageType, CallOptions>;\n    /**\n     * Invokes the chat model with a single input.\n     * @param input The input for the language model.\n     * @param options The call options.\n     * @returns A Promise that resolves to a BaseMessageChunk.\n     */\n    invoke(input: BaseLanguageModelInput, options?: Partial<CallOptions>): Promise<OutputMessageType>;\n    _streamResponseChunks(_messages: BaseMessage[], _options: this[\"ParsedCallOptions\"], _runManager?: CallbackManagerForLLMRun): AsyncGenerator<ChatGenerationChunk>;\n    _streamIterator(input: BaseLanguageModelInput, options?: Partial<CallOptions>): AsyncGenerator<OutputMessageType>;\n    getLsParams(options: this[\"ParsedCallOptions\"]): LangSmithParams;\n    /** @ignore */\n    _generateUncached(messages: BaseMessageLike[][], parsedOptions: this[\"ParsedCallOptions\"], handledOptions: RunnableConfig, startedRunManagers?: CallbackManagerForLLMRun[]): Promise<LLMResult>;\n    _generateCached({ messages, cache, llmStringKey, parsedOptions, handledOptions }: {\n        messages: BaseMessageLike[][];\n        cache: BaseCache<Generation[]>;\n        llmStringKey: string;\n        parsedOptions: any;\n        handledOptions: RunnableConfig;\n    }): Promise<LLMResult & {\n        missingPromptIndices: number[];\n        startedRunManagers?: CallbackManagerForLLMRun[];\n    }>;\n    /**\n     * Generates chat based on the input messages.\n     * @param messages An array of arrays of BaseMessage instances.\n     * @param options The call options or an array of stop sequences.\n     * @param callbacks The callbacks for the language model.\n     * @returns A Promise that resolves to an LLMResult.\n     */\n    generate(messages: BaseMessageLike[][], options?: string[] | Partial<CallOptions>, callbacks?: Callbacks): Promise<LLMResult>;\n    /**\n     * Get the parameters used to invoke the model\n     */\n    invocationParams(_options?: this[\"ParsedCallOptions\"]): any;\n    _modelType(): string;\n    abstract _llmType(): string;\n    /**\n     * Generates a prompt based on the input prompt values.\n     * @param promptValues An array of BasePromptValue instances.\n     * @param options The call options or an array of stop sequences.\n     * @param callbacks The callbacks for the language model.\n     * @returns A Promise that resolves to an LLMResult.\n     */\n    generatePrompt(promptValues: BasePromptValueInterface[], options?: string[] | Partial<CallOptions>, callbacks?: Callbacks): Promise<LLMResult>;\n    abstract _generate(messages: BaseMessage[], options: this[\"ParsedCallOptions\"], runManager?: CallbackManagerForLLMRun): Promise<ChatResult>;\n    withStructuredOutput<RunOutput extends Record<string, any> = Record<string, any>>(outputSchema: ZodTypeV4<RunOutput> | Record<string, any>, config?: StructuredOutputMethodOptions<false>): Runnable<BaseLanguageModelInput, RunOutput>;\n    withStructuredOutput<RunOutput extends Record<string, any> = Record<string, any>>(outputSchema: ZodTypeV4<RunOutput> | Record<string, any>, config?: StructuredOutputMethodOptions<true>): Runnable<BaseLanguageModelInput, {\n        raw: BaseMessage;\n        parsed: RunOutput;\n    }>;\n    withStructuredOutput<RunOutput extends Record<string, any> = Record<string, any>>(outputSchema: ZodTypeV3<RunOutput> | Record<string, any>, config?: StructuredOutputMethodOptions<false>): Runnable<BaseLanguageModelInput, RunOutput>;\n    withStructuredOutput<RunOutput extends Record<string, any> = Record<string, any>>(outputSchema: ZodTypeV3<RunOutput> | Record<string, any>, config?: StructuredOutputMethodOptions<true>): Runnable<BaseLanguageModelInput, {\n        raw: BaseMessage;\n        parsed: RunOutput;\n    }>;\n}\n/**\n * An abstract class that extends BaseChatModel and provides a simple\n * implementation of _generate.\n */\nexport declare abstract class SimpleChatModel<CallOptions extends BaseChatModelCallOptions = BaseChatModelCallOptions> extends BaseChatModel<CallOptions> {\n    abstract _call(messages: BaseMessage[], options: this[\"ParsedCallOptions\"], runManager?: CallbackManagerForLLMRun): Promise<string>;\n    _generate(messages: BaseMessage[], options: this[\"ParsedCallOptions\"], runManager?: CallbackManagerForLLMRun): Promise<ChatResult>;\n}\n//# sourceMappingURL=chat_models.d.ts.map"],"mappings":";;;;;;;;;;;;;;;KAWY4B,UAAAA,YAAsBC;;;;AAAtBD,KAIAE,mBAAAA,GAJsBD;EAItBC,MAAAA,EAAAA,MAAAA;EAOAC,KAAAA,EAAAA,MAAAA;AAOZ,CAAA,GAXIF,MAWQG,CAAAA,MAAAA,EAAAA,GAAAA,CAAAA;AA+BZ;;;AA+BoBxB,KArERuB,aAAAA,GAqEQvB;EAAoB,MAAA,EAAA,MAAA;EAE5B0B,KAAAA,EAAAA,MAAAA;AAQZ,CAAA,GA5EIL,MA4EQO,CAAAA,MAAAA,EAAAA,GAAc,CAAA;;;;AAAoET,KAxElFK,mBAAAA,GAAsBb,uBAwE4DQ,GAAAA;EAAmBF;AAAoB;AAKrI;;;;;;;EAC4Bc,gBAAAA,CAAAA,EAAAA,OAAAA;EAA2BjB;;;;;;;;;;;;;;;EAgBqEiB,aAAAA,CAAAA,EApExG/B,oBAoEwG+B;CAApDb;;;;AAOWc,KAtEvEP,wBAAAA,GAA2BhB,4BAsE4CuB,GAAAA;EAARI;;;;;;;;;;;;;;EAK8GlC,WAAAA,CAAAA,EA5DvKkB,UA4DuKlB;EAARkC;;;;;;;;;;;;;;;EAkBhHD,aAAAA,CAAAA,EA9D7CnC,oBA8D6CmC;CAAkCtB;AAAoBX,KA5D3GwB,eAAAA,GA4D2GxB;EAARkC,WAAAA,CAAAA,EAAAA,MAAAA;EAc9EnC,aAAAA,CAAAA,EAAAA,MAAAA;EAAyD8B,aAAAA,EAAAA,MAAAA;EAARI,cAAAA,CAAAA,EAAAA,MAAAA;EAAkCtB,aAAAA,CAAAA,EAAAA,MAAAA;EAAoBX,OAAAA,CAAAA,EApE1HyB,KAoE0HzB,CAAAA,MAAAA,CAAAA;CAARkC;AAC/FxC,KAnErBgC,cAAAA,GAAiBZ,uBAmEIpB,GAnEsByB,MAmEtBzB,CAAAA,MAAAA,EAAAA,GAAAA,CAAAA,GAnE4CY,cAmE5CZ,GAnE6DuB,gBAmE7DvB,GAnEgFqB,oBAmEhFrB;;;;;AACgCyB,uBA/DnCQ,aA+DmCR,CAAAA,oBA/DDI,wBA+DCJ,GA/D0BI,wBA+D1BJ,EAAAA,0BA/D8ExB,gBA+D9EwB,GA/DiGtB,cA+DjGsB,CAAAA,SA/DyHf,iBA+DzHe,CA/D2IW,iBA+D3IX,EA/D8JU,WA+D9JV,CAAAA,CAAAA;EAA6CS,iBAAAA,EA9DvFI,IA8DuFJ,CA9DlFC,WA8DkFD,EA9DrEG,OA8DqEH,CAAAA,MA9DvDhB,cA8DuDgB,EAAAA,QAAAA,GAAAA,SAAAA,GAAAA,gBAAAA,CAAAA,CAAAA;EAAVnC,YAAAA,EAAAA,MAAAA,EAAAA;EAAuB0B,gBAAAA,EAAAA,OAAAA;EAA8Bd,aAAAA,CAAAA,EA3DrIP,oBA2DqIO;EAAgDG,IAAAA,QAAAA,CAAAA,CAAAA,EAAAA,MAAAA,EAAAA;EAAwBoB,WAAAA,CAAAA,MAAAA,EAzDzMN,mBAyDyMM;EAAjCZ,iBAAAA,CAAAA,CAAAA,GAAAA,UAAAA,EAxD1JhB,SAwD0JgB,CAAAA,WAAAA,CAAAA,EAAAA,CAAAA,EAxD/HhB,SAwD+HgB,CAAAA,WAAAA,CAAAA;EACrJG,UAAAA,4CAAAA,CAAAA,OAAAA,CAAAA,EAxD0Bc,OAwD1Bd,CAxDkCU,WAwDlCV,CAAAA,CAAAA,EAAAA,CAxDkDP,cAwDlDO,EAAAA,IAAAA,CAAAA,mBAAAA,CAAAA,CAAAA;EAAsBA;;;;;;;;EAA8HH,SAAAA,CAAAA,CAAAA,KAAAA,EA/CzKU,cA+CyKV,EAAAA,EAAAA,MAAAA,CAAAA,EA/C9IiB,OA+C8IjB,CA/CtIa,WA+CsIb,CAAAA,CAAAA,EA/CvHA,QA+CuHA,CA/C9GR,sBA+C8GQ,EA/CtFc,iBA+CsFd,EA/CnEa,WA+CmEb,CAAAA;EAIpJG;;;;;;EAA8JX,MAAAA,CAAAA,KAAAA,EA5CvLA,sBA4CuLA,EAAAA,OAAAA,CAAAA,EA5CrJyB,OA4CqJzB,CA5C7IqB,WA4C6IrB,CAAAA,CAAAA,EA5C9H0B,OA4C8H1B,CA5CtHsB,iBA4CsHtB,CAAAA;EAAwBoB,qBAAAA,CAAAA,SAAAA,EA3C5LlC,WA2C4LkC,EAAAA,EAAAA,QAAAA,EAAAA,IAAAA,CAAAA,mBAAAA,CAAAA,EAAAA,WAAAA,CAAAA,EA3C1HlB,wBA2C0HkB,CAAAA,EA3C/FO,cA2C+FP,CA3ChF3B,mBA2CgF2B,CAAAA;EAAjCZ,eAAAA,CAAAA,KAAAA,EA1CrKR,sBA0CqKQ,EAAAA,OAAAA,CAAAA,EA1CnIiB,OA0CmIjB,CA1C3Ha,WA0C2Hb,CAAAA,CAAAA,EA1C5GmB,cA0C4GnB,CA1C7Fc,iBA0C6Fd,CAAAA;EACrJG,WAAAA,CAAAA,OAAAA,EAAAA,IAAAA,CAAAA,mBAAAA,CAAAA,CAAAA,EA1CUK,eA0CVL;EAAsBA;EAA6CS,iBAAAA,CAAAA,QAAAA,EAxC9EhC,eAwC8EgC,EAAAA,EAAAA,EAAAA,aAAAA,EAAAA,IAAAA,CAAAA,mBAAAA,CAAAA,EAAAA,cAAAA,EAxCChB,cAwCDgB,EAAAA,kBAAAA,CAAAA,EAxCsClB,wBAwCtCkB,EAAAA,CAAAA,EAxCmEM,OAwCnEN,CAxC2E5B,SAwC3E4B,CAAAA;EAAVrC,eAAAA,CAAAA;IAAAA,QAAAA;IAAAA,KAAAA;IAAAA,YAAAA;IAAAA,aAAAA;IAAAA;EAA2FyB,CAA3FzB,EAAAA;IAAuB4B,QAAAA,EAtCzGvB,eAsCyGuB,EAAAA,EAAAA;IAA8Bd,KAAAA,EArC1IQ,SAqC0IR,CArChIF,UAqCgIE,EAAAA,CAAAA;IAA+CG,YAAAA,EAAAA,MAAAA;IAC3Ld,aAAAA,EAAAA,GAAAA;IACGkC,cAAAA,EApCQhB,cAoCRgB;EAF+KZ,CAAAA,CAAAA,EAjCvLkB,OAiCuLlB,CAjC/KhB,SAiC+KgB,GAAAA;IArELZ,oBAAAA,EAAAA,MAAAA,EAAAA;IAAiB,kBAAA,CAAA,EAsC9KM,wBAtC8K,EAAA;EA8E7K+B,CAAAA,CAAAA;EAAoClB;;;;;;;EAEsBb,QAAAA,CAAAA,QAAAA,EAjCjEd,eAiCiEc,EAAAA,EAAAA,EAAAA,OAAAA,CAAAA,EAAAA,MAAAA,EAAAA,GAjCvBuB,OAiCuBvB,CAjCfmB,WAiCenB,CAAAA,EAAAA,SAAAA,CAAAA,EAjCWC,SAiCXD,CAAAA,EAjCuBwB,OAiCvBxB,CAjC+BV,SAiC/BU,CAAAA;EAAmCR;;;EAFiB,gBAAA,CAAA,QAAA,CAAA,EAAA,IAAA,CAAA,mBAAA,CAAA,CAAA,EAAA,GAAA;;;;;;;;;;+BAjB3GH,iDAAiDkC,QAAQJ,0BAA0BlB,YAAYuB,QAAQlC;+BACvGN,gEAAgEgB,2BAA2BwB,QAAQhC;yCACzFiB,sBAAsBA,mCAAmC1B,SAAUmC,aAAaT,8BAA8Bd,uCAAuCW,SAASR,wBAAwBoB;yCACtLT,sBAAsBA,mCAAmC1B,SAAUmC,aAAaT,8BAA8Bd,sCAAsCW,SAASR;SAC3Ld;YACGkC;;yCAE2BT,sBAAsBA,mCAAmC5B,QAAUqC,aAAaT,8BAA8Bd,uCAAuCW,SAASR,wBAAwBoB;yCACtLT,sBAAsBA,mCAAmC5B,QAAUqC,aAAaT,8BAA8Bd,sCAAsCW,SAASR;SAC3Ld;YACGkC;;;;;;;uBAOca,oCAAoClB,2BAA2BA,kCAAkCI,cAAcE;2BAChHnC,gEAAgEgB,2BAA2BwB;sBAChGxC,gEAAgEgB,2BAA2BwB,QAAQhC"}

package/dist/load/import_map.cjs

@@ -55,6 +55,7 @@ const require_utils_event_source_parse = require('../utils/event_source_parse.cj
 const require_utils_format = require('../utils/format.cjs');
 const require_utils_function_calling = require('../utils/function_calling.cjs');
 const require_utils_math = require('../utils/math.cjs');
+const require_utils_ssrf = require('../utils/ssrf.cjs');
 const require_utils_testing_index = require('../utils/testing/index.cjs');
 const require_utils_types_index = require('../utils/types/index.cjs');
 
@@ -114,6 +115,7 @@ require_rolldown_runtime.__export(import_map_exports, {
 	utils__json_patch: () => require_utils_json_patch.json_patch_exports,
 	utils__json_schema: () => require_utils_json_schema.json_schema_exports,
 	utils__math: () => require_utils_math.math_exports,
+	utils__ssrf: () => require_utils_ssrf.ssrf_exports,
 	utils__stream: () => require_utils_stream.stream_exports,
 	utils__testing: () => require_utils_testing_index.testing_exports,
 	utils__tiktoken: () => require_utils_tiktoken.tiktoken_exports,

package/dist/load/import_map.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"import_map.cjs","names":[],"sources":["../../src/load/import_map.ts"],"sourcesContent":["/** Auto-generated by import-map plugin. Do not edit manually */\n\nexport * as agents from \"../agents.js\";\nexport * as caches from \"../caches/index.js\";\nexport * as callbacks__base from \"../callbacks/base.js\";\nexport * as callbacks__manager from \"../callbacks/manager.js\";\nexport * as callbacks__promises from \"../callbacks/promises.js\";\nexport * as chat_history from \"../chat_history.js\";\nexport * as document_loaders__base from \"../document_loaders/base.js\";\nexport * as document_loaders__langsmith from \"../document_loaders/langsmith.js\";\nexport * as documents from \"../documents/index.js\";\nexport * as embeddings from \"../embeddings.js\";\nexport * as errors from \"../errors/index.js\";\nexport * as example_selectors from \"../example_selectors/index.js\";\nexport * as index from \"../index.js\";\nexport * as indexing from \"../indexing/index.js\";\nexport * as language_models__base from \"../language_models/base.js\";\nexport * as language_models__chat_models from \"../language_models/chat_models.js\";\nexport * as language_models__llms from \"../language_models/llms.js\";\nexport * as language_models__profile from \"../language_models/profile.js\";\nexport * as load__serializable from \"../load/serializable.js\";\nexport * as memory from \"../memory.js\";\nexport * as messages from \"../messages/index.js\";\nexport * as messages__tool from \"../messages/tool.js\";\nexport * as output_parsers from \"../output_parsers/index.js\";\nexport * as output_parsers__openai_functions from \"../output_parsers/openai_functions/index.js\";\nexport * as output_parsers__openai_tools from \"../output_parsers/openai_tools/index.js\";\nexport * as outputs from \"../outputs.js\";\nexport * as prompt_values from \"../prompt_values.js\";\nexport * as prompts from \"../prompts/index.js\";\nexport * as retrievers__document_compressors from \"../retrievers/document_compressors/index.js\";\nexport * as retrievers from \"../retrievers/index.js\";\nexport * as runnables__graph from \"../runnables/graph.js\";\nexport * as runnables from \"../runnables/index.js\";\nexport * as singletons from \"../singletons/index.js\";\nexport * as stores from \"../stores.js\";\nexport * as structured_query from \"../structured_query/index.js\";\nexport * as tools from \"../tools/index.js\";\nexport * as tracers__base from \"../tracers/base.js\";\nexport * as tracers__console from \"../tracers/console.js\";\nexport * as tracers__log_stream from \"../tracers/log_stream.js\";\nexport * as tracers__run_collector from \"../tracers/run_collector.js\";\nexport * as tracers__tracer_langchain from \"../tracers/tracer_langchain.js\";\nexport * as types__stream from \"../types/stream.js\";\nexport * as utils__async_caller from \"../utils/async_caller.js\";\nexport * as utils__chunk_array from \"../utils/chunk_array.js\";\nexport * as utils__context from \"../utils/context.js\";\nexport * as utils__env from \"../utils/env.js\";\nexport * as utils__event_source_parse from \"../utils/event_source_parse.js\";\nexport * as utils__format from \"../utils/format.js\";\nexport * as utils__function_calling from \"../utils/function_calling.js\";\nexport * as utils__hash from \"../utils/hash.js\";\nexport * as utils__json_patch from \"../utils/json_patch.js\";\nexport * as utils__json_schema from \"../utils/json_schema.js\";\nexport * as utils__math from \"../utils/math.js\";\nexport * as utils__stream from \"../utils/stream.js\";\nexport * as utils__testing from \"../utils/testing/index.js\";\nexport * as utils__tiktoken from \"../utils/tiktoken.js\";\nexport * as utils__types from \"../utils/types/index.js\";\nexport * as vectorstores from \"../vectorstores.js\";\n"],"mappings":""}
+{"version":3,"file":"import_map.cjs","names":[],"sources":["../../src/load/import_map.ts"],"sourcesContent":["/** Auto-generated by import-map plugin. Do not edit manually */\n\nexport * as agents from \"../agents.js\";\nexport * as caches from \"../caches/index.js\";\nexport * as callbacks__base from \"../callbacks/base.js\";\nexport * as callbacks__manager from \"../callbacks/manager.js\";\nexport * as callbacks__promises from \"../callbacks/promises.js\";\nexport * as chat_history from \"../chat_history.js\";\nexport * as document_loaders__base from \"../document_loaders/base.js\";\nexport * as document_loaders__langsmith from \"../document_loaders/langsmith.js\";\nexport * as documents from \"../documents/index.js\";\nexport * as embeddings from \"../embeddings.js\";\nexport * as errors from \"../errors/index.js\";\nexport * as example_selectors from \"../example_selectors/index.js\";\nexport * as index from \"../index.js\";\nexport * as indexing from \"../indexing/index.js\";\nexport * as language_models__base from \"../language_models/base.js\";\nexport * as language_models__chat_models from \"../language_models/chat_models.js\";\nexport * as language_models__llms from \"../language_models/llms.js\";\nexport * as language_models__profile from \"../language_models/profile.js\";\nexport * as load__serializable from \"../load/serializable.js\";\nexport * as memory from \"../memory.js\";\nexport * as messages from \"../messages/index.js\";\nexport * as messages__tool from \"../messages/tool.js\";\nexport * as output_parsers from \"../output_parsers/index.js\";\nexport * as output_parsers__openai_functions from \"../output_parsers/openai_functions/index.js\";\nexport * as output_parsers__openai_tools from \"../output_parsers/openai_tools/index.js\";\nexport * as outputs from \"../outputs.js\";\nexport * as prompt_values from \"../prompt_values.js\";\nexport * as prompts from \"../prompts/index.js\";\nexport * as retrievers__document_compressors from \"../retrievers/document_compressors/index.js\";\nexport * as retrievers from \"../retrievers/index.js\";\nexport * as runnables__graph from \"../runnables/graph.js\";\nexport * as runnables from \"../runnables/index.js\";\nexport * as singletons from \"../singletons/index.js\";\nexport * as stores from \"../stores.js\";\nexport * as structured_query from \"../structured_query/index.js\";\nexport * as tools from \"../tools/index.js\";\nexport * as tracers__base from \"../tracers/base.js\";\nexport * as tracers__console from \"../tracers/console.js\";\nexport * as tracers__log_stream from \"../tracers/log_stream.js\";\nexport * as tracers__run_collector from \"../tracers/run_collector.js\";\nexport * as tracers__tracer_langchain from \"../tracers/tracer_langchain.js\";\nexport * as types__stream from \"../types/stream.js\";\nexport * as utils__async_caller from \"../utils/async_caller.js\";\nexport * as utils__chunk_array from \"../utils/chunk_array.js\";\nexport * as utils__context from \"../utils/context.js\";\nexport * as utils__env from \"../utils/env.js\";\nexport * as utils__event_source_parse from \"../utils/event_source_parse.js\";\nexport * as utils__format from \"../utils/format.js\";\nexport * as utils__function_calling from \"../utils/function_calling.js\";\nexport * as utils__hash from \"../utils/hash.js\";\nexport * as utils__json_patch from \"../utils/json_patch.js\";\nexport * as utils__json_schema from \"../utils/json_schema.js\";\nexport * as utils__math from \"../utils/math.js\";\nexport * as utils__ssrf from \"../utils/ssrf.js\";\nexport * as utils__stream from \"../utils/stream.js\";\nexport * as utils__testing from \"../utils/testing/index.js\";\nexport * as utils__tiktoken from \"../utils/tiktoken.js\";\nexport * as utils__types from \"../utils/types/index.js\";\nexport * as vectorstores from \"../vectorstores.js\";\n"],"mappings":""}

package/dist/load/import_map.js

@@ -55,6 +55,7 @@ import { event_source_parse_exports } from "../utils/event_source_parse.js";
 import { format_exports } from "../utils/format.js";
 import { function_calling_exports } from "../utils/function_calling.js";
 import { math_exports } from "../utils/math.js";
+import { ssrf_exports } from "../utils/ssrf.js";
 import { testing_exports } from "../utils/testing/index.js";
 import { types_exports } from "../utils/types/index.js";
 
@@ -114,6 +115,7 @@ __export(import_map_exports, {
 	utils__json_patch: () => json_patch_exports,
 	utils__json_schema: () => json_schema_exports,
 	utils__math: () => math_exports,
+	utils__ssrf: () => ssrf_exports,
 	utils__stream: () => stream_exports,
 	utils__testing: () => testing_exports,
 	utils__tiktoken: () => tiktoken_exports,

package/dist/load/import_map.js.map

@@ -1 +1 @@
-{"version":3,"file":"import_map.js","names":[],"sources":["../../src/load/import_map.ts"],"sourcesContent":["/** Auto-generated by import-map plugin. Do not edit manually */\n\nexport * as agents from \"../agents.js\";\nexport * as caches from \"../caches/index.js\";\nexport * as callbacks__base from \"../callbacks/base.js\";\nexport * as callbacks__manager from \"../callbacks/manager.js\";\nexport * as callbacks__promises from \"../callbacks/promises.js\";\nexport * as chat_history from \"../chat_history.js\";\nexport * as document_loaders__base from \"../document_loaders/base.js\";\nexport * as document_loaders__langsmith from \"../document_loaders/langsmith.js\";\nexport * as documents from \"../documents/index.js\";\nexport * as embeddings from \"../embeddings.js\";\nexport * as errors from \"../errors/index.js\";\nexport * as example_selectors from \"../example_selectors/index.js\";\nexport * as index from \"../index.js\";\nexport * as indexing from \"../indexing/index.js\";\nexport * as language_models__base from \"../language_models/base.js\";\nexport * as language_models__chat_models from \"../language_models/chat_models.js\";\nexport * as language_models__llms from \"../language_models/llms.js\";\nexport * as language_models__profile from \"../language_models/profile.js\";\nexport * as load__serializable from \"../load/serializable.js\";\nexport * as memory from \"../memory.js\";\nexport * as messages from \"../messages/index.js\";\nexport * as messages__tool from \"../messages/tool.js\";\nexport * as output_parsers from \"../output_parsers/index.js\";\nexport * as output_parsers__openai_functions from \"../output_parsers/openai_functions/index.js\";\nexport * as output_parsers__openai_tools from \"../output_parsers/openai_tools/index.js\";\nexport * as outputs from \"../outputs.js\";\nexport * as prompt_values from \"../prompt_values.js\";\nexport * as prompts from \"../prompts/index.js\";\nexport * as retrievers__document_compressors from \"../retrievers/document_compressors/index.js\";\nexport * as retrievers from \"../retrievers/index.js\";\nexport * as runnables__graph from \"../runnables/graph.js\";\nexport * as runnables from \"../runnables/index.js\";\nexport * as singletons from \"../singletons/index.js\";\nexport * as stores from \"../stores.js\";\nexport * as structured_query from \"../structured_query/index.js\";\nexport * as tools from \"../tools/index.js\";\nexport * as tracers__base from \"../tracers/base.js\";\nexport * as tracers__console from \"../tracers/console.js\";\nexport * as tracers__log_stream from \"../tracers/log_stream.js\";\nexport * as tracers__run_collector from \"../tracers/run_collector.js\";\nexport * as tracers__tracer_langchain from \"../tracers/tracer_langchain.js\";\nexport * as types__stream from \"../types/stream.js\";\nexport * as utils__async_caller from \"../utils/async_caller.js\";\nexport * as utils__chunk_array from \"../utils/chunk_array.js\";\nexport * as utils__context from \"../utils/context.js\";\nexport * as utils__env from \"../utils/env.js\";\nexport * as utils__event_source_parse from \"../utils/event_source_parse.js\";\nexport * as utils__format from \"../utils/format.js\";\nexport * as utils__function_calling from \"../utils/function_calling.js\";\nexport * as utils__hash from \"../utils/hash.js\";\nexport * as utils__json_patch from \"../utils/json_patch.js\";\nexport * as utils__json_schema from \"../utils/json_schema.js\";\nexport * as utils__math from \"../utils/math.js\";\nexport * as utils__stream from \"../utils/stream.js\";\nexport * as utils__testing from \"../utils/testing/index.js\";\nexport * as utils__tiktoken from \"../utils/tiktoken.js\";\nexport * as utils__types from \"../utils/types/index.js\";\nexport * as vectorstores from \"../vectorstores.js\";\n"],"mappings":""}
+{"version":3,"file":"import_map.js","names":[],"sources":["../../src/load/import_map.ts"],"sourcesContent":["/** Auto-generated by import-map plugin. Do not edit manually */\n\nexport * as agents from \"../agents.js\";\nexport * as caches from \"../caches/index.js\";\nexport * as callbacks__base from \"../callbacks/base.js\";\nexport * as callbacks__manager from \"../callbacks/manager.js\";\nexport * as callbacks__promises from \"../callbacks/promises.js\";\nexport * as chat_history from \"../chat_history.js\";\nexport * as document_loaders__base from \"../document_loaders/base.js\";\nexport * as document_loaders__langsmith from \"../document_loaders/langsmith.js\";\nexport * as documents from \"../documents/index.js\";\nexport * as embeddings from \"../embeddings.js\";\nexport * as errors from \"../errors/index.js\";\nexport * as example_selectors from \"../example_selectors/index.js\";\nexport * as index from \"../index.js\";\nexport * as indexing from \"../indexing/index.js\";\nexport * as language_models__base from \"../language_models/base.js\";\nexport * as language_models__chat_models from \"../language_models/chat_models.js\";\nexport * as language_models__llms from \"../language_models/llms.js\";\nexport * as language_models__profile from \"../language_models/profile.js\";\nexport * as load__serializable from \"../load/serializable.js\";\nexport * as memory from \"../memory.js\";\nexport * as messages from \"../messages/index.js\";\nexport * as messages__tool from \"../messages/tool.js\";\nexport * as output_parsers from \"../output_parsers/index.js\";\nexport * as output_parsers__openai_functions from \"../output_parsers/openai_functions/index.js\";\nexport * as output_parsers__openai_tools from \"../output_parsers/openai_tools/index.js\";\nexport * as outputs from \"../outputs.js\";\nexport * as prompt_values from \"../prompt_values.js\";\nexport * as prompts from \"../prompts/index.js\";\nexport * as retrievers__document_compressors from \"../retrievers/document_compressors/index.js\";\nexport * as retrievers from \"../retrievers/index.js\";\nexport * as runnables__graph from \"../runnables/graph.js\";\nexport * as runnables from \"../runnables/index.js\";\nexport * as singletons from \"../singletons/index.js\";\nexport * as stores from \"../stores.js\";\nexport * as structured_query from \"../structured_query/index.js\";\nexport * as tools from \"../tools/index.js\";\nexport * as tracers__base from \"../tracers/base.js\";\nexport * as tracers__console from \"../tracers/console.js\";\nexport * as tracers__log_stream from \"../tracers/log_stream.js\";\nexport * as tracers__run_collector from \"../tracers/run_collector.js\";\nexport * as tracers__tracer_langchain from \"../tracers/tracer_langchain.js\";\nexport * as types__stream from \"../types/stream.js\";\nexport * as utils__async_caller from \"../utils/async_caller.js\";\nexport * as utils__chunk_array from \"../utils/chunk_array.js\";\nexport * as utils__context from \"../utils/context.js\";\nexport * as utils__env from \"../utils/env.js\";\nexport * as utils__event_source_parse from \"../utils/event_source_parse.js\";\nexport * as utils__format from \"../utils/format.js\";\nexport * as utils__function_calling from \"../utils/function_calling.js\";\nexport * as utils__hash from \"../utils/hash.js\";\nexport * as utils__json_patch from \"../utils/json_patch.js\";\nexport * as utils__json_schema from \"../utils/json_schema.js\";\nexport * as utils__math from \"../utils/math.js\";\nexport * as utils__ssrf from \"../utils/ssrf.js\";\nexport * as utils__stream from \"../utils/stream.js\";\nexport * as utils__testing from \"../utils/testing/index.js\";\nexport * as utils__tiktoken from \"../utils/tiktoken.js\";\nexport * as utils__types from \"../utils/types/index.js\";\nexport * as vectorstores from \"../vectorstores.js\";\n"],"mappings":""}

package/dist/memory.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.cts","names":["InputValues","Record","OutputValues","MemoryVariables","BaseMemory","Promise","getInputValue","getOutputValue","getPromptInputKey"],"sources":["../src/memory.d.ts"],"sourcesContent":["/**\n * Type alias for a record where the keys are strings and the values can\n * be any type. This is used to represent the input values for a Chain.\n */\nexport type InputValues = Record<string, any>;\n/**\n * Type alias for a record where the keys are strings and the values can\n * be any type. This is used to represent the output values from a Chain.\n */\nexport type OutputValues = Record<string, any>;\n/**\n * Type alias for a record where the keys are strings and the values can\n * be any type. This is used to represent the memory variables in a Chain.\n */\nexport type MemoryVariables = Record<string, any>;\n/**\n * Abstract base class for memory in LangChain's Chains. Memory refers to\n * the state in Chains. It can be used to store information about past\n * executions of a Chain and inject that information into the inputs of\n * future executions of the Chain.\n */\nexport declare abstract class BaseMemory {\n    abstract get memoryKeys(): string[];\n    /**\n     * Abstract method that should take an object of input values and return a\n     * Promise that resolves with an object of memory variables. The\n     * implementation of this method should load the memory variables from the\n     * provided input values.\n     * @param values An object of input values.\n     * @returns Promise that resolves with an object of memory variables.\n     */\n    abstract loadMemoryVariables(values: InputValues): Promise<MemoryVariables>;\n    /**\n     * Abstract method that should take two objects, one of input values and\n     * one of output values, and return a Promise that resolves when the\n     * context has been saved. The implementation of this method should save\n     * the context based on the provided input and output values.\n     * @param inputValues An object of input values.\n     * @param outputValues An object of output values.\n     * @returns Promise that resolves when the context has been saved.\n     */\n    abstract saveContext(inputValues: InputValues, outputValues: OutputValues): Promise<void>;\n}\n/**\n * This function is used by memory classes to select the input value\n * to use for the memory. If there is only one input value, it is used.\n * If there are multiple input values, the inputKey must be specified.\n */\nexport declare const getInputValue: (inputValues: InputValues, inputKey?: string | undefined) => any;\n/**\n * This function is used by memory classes to select the output value\n * to use for the memory. If there is only one output value, it is used.\n * If there are multiple output values, the outputKey must be specified.\n * If no outputKey is specified, an error is thrown.\n */\nexport declare const getOutputValue: (outputValues: OutputValues, outputKey?: string | undefined) => any;\n/**\n * Function used by memory classes to get the key of the prompt input,\n * excluding any keys that are memory variables or the \"stop\" key. If\n * there is not exactly one prompt input key, an error is thrown.\n */\nexport declare function getPromptInputKey(inputs: Record<string, unknown>, memoryVariables: string[]): string;\n//# sourceMappingURL=memory.d.ts.map"],"mappings":";;AAIA;AAKA;AAKA;AAO8BI,KAjBlBJ,WAAAA,GAAcC,MAiBc,CAAA,MAAA,EAAA,GAAA,CAAA;;;;;AAoByBC,KAhCrDA,YAAAA,GAAeD,MAgCsCC,CAAAA,MAAAA,EAAAA,GAAAA,CAAAA;;AAAsB;AAOvF;AAOA;AAMwBM,KA/CZL,eAAAA,GAAkBF,MA+CoBA,CAAAA,MAAM,EAAA,GAAA,CAAA;;;;;;;uBAxC1BG,UAAAA;;;;;;;;;;uCAUWJ,cAAcK,QAAQF;;;;;;;;;;oCAUzBH,2BAA2BE,eAAeG;;;;;;;cAO3DC,6BAA6BN;;;;;;;cAO7BO,+BAA+BL;;;;;;iBAM5BM,iBAAAA,SAA0BP"}
+{"version":3,"file":"memory.d.cts","names":["InputValues","Record","OutputValues","MemoryVariables","BaseMemory","Promise","getInputValue","getOutputValue","getPromptInputKey"],"sources":["../src/memory.d.ts"],"sourcesContent":["/**\n * Type alias for a record where the keys are strings and the values can\n * be any type. This is used to represent the input values for a Chain.\n */\nexport type InputValues = Record<string, any>;\n/**\n * Type alias for a record where the keys are strings and the values can\n * be any type. This is used to represent the output values from a Chain.\n */\nexport type OutputValues = Record<string, any>;\n/**\n * Type alias for a record where the keys are strings and the values can\n * be any type. This is used to represent the memory variables in a Chain.\n */\nexport type MemoryVariables = Record<string, any>;\n/**\n * Abstract base class for memory in LangChain's Chains. Memory refers to\n * the state in Chains. It can be used to store information about past\n * executions of a Chain and inject that information into the inputs of\n * future executions of the Chain.\n */\nexport declare abstract class BaseMemory {\n    abstract get memoryKeys(): string[];\n    /**\n     * Abstract method that should take an object of input values and return a\n     * Promise that resolves with an object of memory variables. The\n     * implementation of this method should load the memory variables from the\n     * provided input values.\n     * @param values An object of input values.\n     * @returns Promise that resolves with an object of memory variables.\n     */\n    abstract loadMemoryVariables(values: InputValues): Promise<MemoryVariables>;\n    /**\n     * Abstract method that should take two objects, one of input values and\n     * one of output values, and return a Promise that resolves when the\n     * context has been saved. The implementation of this method should save\n     * the context based on the provided input and output values.\n     * @param inputValues An object of input values.\n     * @param outputValues An object of output values.\n     * @returns Promise that resolves when the context has been saved.\n     */\n    abstract saveContext(inputValues: InputValues, outputValues: OutputValues): Promise<void>;\n}\n/**\n * This function is used by memory classes to select the input value\n * to use for the memory. If there is only one input value, it is used.\n * If there are multiple input values, the inputKey must be specified.\n */\nexport declare const getInputValue: (inputValues: InputValues, inputKey?: string | undefined) => any;\n/**\n * This function is used by memory classes to select the output value\n * to use for the memory. If there is only one output value, it is used.\n * If there are multiple output values, the outputKey must be specified.\n * If no outputKey is specified, an error is thrown.\n */\nexport declare const getOutputValue: (outputValues: OutputValues, outputKey?: string | undefined) => any;\n/**\n * Function used by memory classes to get the key of the prompt input,\n * excluding any keys that are memory variables or the \"stop\" key. If\n * there is not exactly one prompt input key, an error is thrown.\n */\nexport declare function getPromptInputKey(inputs: Record<string, unknown>, memoryVariables: string[]): string;\n//# sourceMappingURL=memory.d.ts.map"],"mappings":";;AAIA;AAKA;AAKA;AAO8BI,KAjBlBJ,WAAAA,GAAcC,MAiBc,CAAA,MAAA,EAAA,GAAA,CAAA;;;;;AAoByBC,KAhCrDA,YAAAA,GAAeD,MAgCsCC,CAAAA,MAAAA,EAAAA,GAAAA,CAAAA;;AAAsB;AAOvF;AAOA;AAMwBM,KA/CZL,eAAAA,GAAkBF,MA+CW,CAASA,MAAM,EAAA,GAAA,CAAA;;;;;;;uBAxC1BG,UAAAA;;;;;;;;;;uCAUWJ,cAAcK,QAAQF;;;;;;;;;;oCAUzBH,2BAA2BE,eAAeG;;;;;;;cAO3DC,6BAA6BN;;;;;;;cAO7BO,+BAA+BL;;;;;;iBAM5BM,iBAAAA,SAA0BP"}

package/dist/utils/ssrf.cjs

@@ -0,0 +1,271 @@
+const require_rolldown_runtime = require('../_virtual/rolldown_runtime.cjs');
+
+//#region src/utils/ssrf.ts
+var ssrf_exports = {};
+require_rolldown_runtime.__export(ssrf_exports, {
+	isCloudMetadata: () => isCloudMetadata,
+	isLocalhost: () => isLocalhost,
+	isPrivateIp: () => isPrivateIp,
+	isSafeUrl: () => isSafeUrl,
+	isSameOrigin: () => isSameOrigin,
+	validateSafeUrl: () => validateSafeUrl
+});
+const PRIVATE_IP_RANGES = [
+	"10.0.0.0/8",
+	"172.16.0.0/12",
+	"192.168.0.0/16",
+	"127.0.0.0/8",
+	"169.254.0.0/16",
+	"0.0.0.0/8",
+	"::1/128",
+	"fc00::/7",
+	"fe80::/10",
+	"ff00::/8"
+];
+const CLOUD_METADATA_IPS = [
+	"169.254.169.254",
+	"169.254.170.2",
+	"100.100.100.200"
+];
+const CLOUD_METADATA_HOSTNAMES = [
+	"metadata.google.internal",
+	"metadata",
+	"instance-data"
+];
+const LOCALHOST_NAMES = ["localhost", "localhost.localdomain"];
+/**
+* IPv4 regex: four octets 0-255
+*/
+const IPV4_REGEX = /^(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)$/;
+/**
+* Check if a string is a valid IPv4 address.
+*/
+function isIPv4(ip) {
+	return IPV4_REGEX.test(ip);
+}
+/**
+* Check if a string is a valid IPv6 address.
+* Uses expandIpv6 for validation.
+*/
+function isIPv6(ip) {
+	return expandIpv6(ip) !== null;
+}
+/**
+* Check if a string is a valid IP address (IPv4 or IPv6).
+*/
+function isIP(ip) {
+	return isIPv4(ip) || isIPv6(ip);
+}
+/**
+* Parse an IP address string to an array of integers (for IPv4) or an array of 16-bit values (for IPv6)
+* Returns null if the IP is invalid.
+*/
+function parseIp(ip) {
+	if (isIPv4(ip)) return ip.split(".").map((octet) => parseInt(octet, 10));
+	else if (isIPv6(ip)) {
+		const expanded = expandIpv6(ip);
+		if (!expanded) return null;
+		const parts = expanded.split(":");
+		const result = [];
+		for (const part of parts) result.push(parseInt(part, 16));
+		return result;
+	}
+	return null;
+}
+/**
+* Expand compressed IPv6 address to full form.
+*/
+function expandIpv6(ip) {
+	if (!ip || typeof ip !== "string") return null;
+	if (!ip.includes(":")) return null;
+	if (!/^[0-9a-fA-F:]+$/.test(ip)) return null;
+	let normalized = ip;
+	if (normalized.includes("::")) {
+		const parts$1 = normalized.split("::");
+		if (parts$1.length > 2) return null;
+		const [left, right] = parts$1;
+		const leftParts = left ? left.split(":") : [];
+		const rightParts = right ? right.split(":") : [];
+		const missing = 8 - (leftParts.length + rightParts.length);
+		if (missing < 0) return null;
+		const zeros = Array(missing).fill("0");
+		normalized = [
+			...leftParts,
+			...zeros,
+			...rightParts
+		].filter((p) => p !== "").join(":");
+	}
+	const parts = normalized.split(":");
+	if (parts.length !== 8) return null;
+	for (const part of parts) {
+		if (part.length === 0 || part.length > 4) return null;
+		if (!/^[0-9a-fA-F]+$/.test(part)) return null;
+	}
+	return parts.map((p) => p.padStart(4, "0").toLowerCase()).join(":");
+}
+/**
+* Parse CIDR notation (e.g., "192.168.0.0/24") into network address and prefix length.
+*/
+function parseCidr(cidr) {
+	const [addrStr, prefixStr] = cidr.split("/");
+	if (!addrStr || !prefixStr) return null;
+	const addr = parseIp(addrStr);
+	if (!addr) return null;
+	const prefixLen = parseInt(prefixStr, 10);
+	if (isNaN(prefixLen)) return null;
+	const isIpv6 = isIPv6(addrStr);
+	if (isIpv6 && prefixLen > 128) return null;
+	if (!isIpv6 && prefixLen > 32) return null;
+	return {
+		addr,
+		prefixLen,
+		isIpv6
+	};
+}
+/**
+* Check if an IP address is in a given CIDR range.
+*/
+function isIpInCidr(ip, cidr) {
+	const ipParsed = parseIp(ip);
+	if (!ipParsed) return false;
+	const cidrParsed = parseCidr(cidr);
+	if (!cidrParsed) return false;
+	const isIpv6 = isIPv6(ip);
+	if (isIpv6 !== cidrParsed.isIpv6) return false;
+	const { addr: cidrAddr, prefixLen } = cidrParsed;
+	if (isIpv6) for (let i = 0; i < Math.ceil(prefixLen / 16); i++) {
+		const bitsToCheck = Math.min(16, prefixLen - i * 16);
+		const mask = 65535 << 16 - bitsToCheck & 65535;
+		if ((ipParsed[i] & mask) !== (cidrAddr[i] & mask)) return false;
+	}
+	else for (let i = 0; i < Math.ceil(prefixLen / 8); i++) {
+		const bitsToCheck = Math.min(8, prefixLen - i * 8);
+		const mask = 255 << 8 - bitsToCheck & 255;
+		if ((ipParsed[i] & mask) !== (cidrAddr[i] & mask)) return false;
+	}
+	return true;
+}
+/**
+* Check if an IP address is private (RFC 1918, loopback, link-local, etc.)
+*/
+function isPrivateIp(ip) {
+	if (!isIP(ip)) return false;
+	for (const range of PRIVATE_IP_RANGES) if (isIpInCidr(ip, range)) return true;
+	return false;
+}
+/**
+* Check if a hostname or IP is a known cloud metadata endpoint.
+*/
+function isCloudMetadata(hostname, ip) {
+	if (CLOUD_METADATA_IPS.includes(ip || "")) return true;
+	const lowerHostname = hostname.toLowerCase();
+	if (CLOUD_METADATA_HOSTNAMES.includes(lowerHostname)) return true;
+	return false;
+}
+/**
+* Check if a hostname or IP is localhost.
+*/
+function isLocalhost(hostname, ip) {
+	if (ip) {
+		if (ip === "127.0.0.1" || ip === "::1" || ip === "0.0.0.0") return true;
+		if (ip.startsWith("127.")) return true;
+	}
+	const lowerHostname = hostname.toLowerCase();
+	if (LOCALHOST_NAMES.includes(lowerHostname)) return true;
+	return false;
+}
+/**
+* Validate that a URL is safe to connect to.
+* Performs static validation checks against hostnames and direct IP addresses.
+* Does not perform DNS resolution.
+*
+* @param url URL to validate
+* @param options.allowPrivate Allow private IPs (default: false)
+* @param options.allowHttp Allow http:// scheme (default: false)
+* @returns The validated URL
+* @throws Error if URL is not safe
+*/
+function validateSafeUrl(url, options) {
+	const allowPrivate = options?.allowPrivate ?? false;
+	const allowHttp = options?.allowHttp ?? false;
+	try {
+		let parsedUrl;
+		try {
+			parsedUrl = new URL(url);
+		} catch {
+			throw new Error(`Invalid URL: ${url}`);
+		}
+		const hostname = parsedUrl.hostname;
+		if (!hostname) throw new Error("URL missing hostname.");
+		if (isCloudMetadata(hostname)) throw new Error(`URL points to cloud metadata endpoint: ${hostname}`);
+		if (isLocalhost(hostname)) {
+			if (!allowPrivate) throw new Error(`URL points to localhost: ${hostname}`);
+			return url;
+		}
+		const scheme = parsedUrl.protocol;
+		if (scheme !== "http:" && scheme !== "https:") throw new Error(`Invalid URL scheme: ${scheme}. Only http and https are allowed.`);
+		if (scheme === "http:" && !allowHttp) throw new Error("HTTP scheme not allowed. Use HTTPS or set allowHttp: true.");
+		if (isIP(hostname)) {
+			const ip = hostname;
+			if (isLocalhost(hostname, ip)) {
+				if (!allowPrivate) throw new Error(`URL points to localhost: ${hostname}`);
+				return url;
+			}
+			if (isCloudMetadata(hostname, ip)) throw new Error(`URL resolves to cloud metadata IP: ${ip} (${hostname})`);
+			if (isPrivateIp(ip)) {
+				if (!allowPrivate) throw new Error(`URL resolves to private IP: ${ip} (${hostname}). Set allowPrivate: true to allow.`);
+			}
+			return url;
+		}
+		return url;
+	} catch (error) {
+		if (error && typeof error === "object" && "message" in error) throw error;
+		throw new Error(`URL validation failed: ${error}`);
+	}
+}
+/**
+* Check if a URL is safe to connect to (non-throwing version).
+*
+* @param url URL to check
+* @param options.allowPrivate Allow private IPs (default: false)
+* @param options.allowHttp Allow http:// scheme (default: false)
+* @returns true if URL is safe, false otherwise
+*/
+function isSafeUrl(url, options) {
+	try {
+		validateSafeUrl(url, options);
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Check if two URLs have the same origin (scheme, host, port).
+* Uses semantic URL parsing to prevent SSRF bypasses via URL variations.
+*
+* @param url1 First URL
+* @param url2 Second URL
+* @returns true if both URLs have the same origin, false otherwise
+*/
+function isSameOrigin(url1, url2) {
+	try {
+		return new URL(url1).origin === new URL(url2).origin;
+	} catch {
+		return false;
+	}
+}
+
+//#endregion
+exports.isCloudMetadata = isCloudMetadata;
+exports.isLocalhost = isLocalhost;
+exports.isPrivateIp = isPrivateIp;
+exports.isSafeUrl = isSafeUrl;
+exports.isSameOrigin = isSameOrigin;
+Object.defineProperty(exports, 'ssrf_exports', {
+  enumerable: true,
+  get: function () {
+    return ssrf_exports;
+  }
+});
+exports.validateSafeUrl = validateSafeUrl;
+//# sourceMappingURL=ssrf.cjs.map

package/dist/utils/ssrf.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.cjs","names":["ip: string","result: number[]","parts","cidr: string","hostname: string","ip?: string","url: string","options?: { allowPrivate?: boolean; allowHttp?: boolean }","parsedUrl: URL","url1: string","url2: string"],"sources":["../../src/utils/ssrf.ts"],"sourcesContent":["// Private IP ranges (RFC 1918, loopback, link-local, etc.)\nconst PRIVATE_IP_RANGES = [\n  \"10.0.0.0/8\",\n  \"172.16.0.0/12\",\n  \"192.168.0.0/16\",\n  \"127.0.0.0/8\",\n  \"169.254.0.0/16\",\n  \"0.0.0.0/8\",\n  \"::1/128\",\n  \"fc00::/7\",\n  \"fe80::/10\",\n  \"ff00::/8\",\n];\n\n// Cloud metadata IPs\nconst CLOUD_METADATA_IPS = [\n  \"169.254.169.254\",\n  \"169.254.170.2\",\n  \"100.100.100.200\",\n];\n\n// Cloud metadata hostnames (case-insensitive)\nconst CLOUD_METADATA_HOSTNAMES = [\n  \"metadata.google.internal\",\n  \"metadata\",\n  \"instance-data\",\n];\n\n// Localhost variations\nconst LOCALHOST_NAMES = [\"localhost\", \"localhost.localdomain\"];\n\n/**\n * IPv4 regex: four octets 0-255\n */\nconst IPV4_REGEX =\n  /^(?:(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)\\.){3}(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)$/;\n\n/**\n * Check if a string is a valid IPv4 address.\n */\nfunction isIPv4(ip: string): boolean {\n  return IPV4_REGEX.test(ip);\n}\n\n/**\n * Check if a string is a valid IPv6 address.\n * Uses expandIpv6 for validation.\n */\nfunction isIPv6(ip: string): boolean {\n  return expandIpv6(ip) !== null;\n}\n\n/**\n * Check if a string is a valid IP address (IPv4 or IPv6).\n */\nfunction isIP(ip: string): boolean {\n  return isIPv4(ip) || isIPv6(ip);\n}\n\n/**\n * Parse an IP address string to an array of integers (for IPv4) or an array of 16-bit values (for IPv6)\n * Returns null if the IP is invalid.\n */\nfunction parseIp(ip: string): number[] | null {\n  if (isIPv4(ip)) {\n    return ip.split(\".\").map((octet) => parseInt(octet, 10));\n  } else if (isIPv6(ip)) {\n    // Normalize IPv6\n    const expanded = expandIpv6(ip);\n    if (!expanded) return null;\n    const parts = expanded.split(\":\");\n    const result: number[] = [];\n    for (const part of parts) {\n      result.push(parseInt(part, 16));\n    }\n    return result;\n  }\n  return null;\n}\n\n/**\n * Expand compressed IPv6 address to full form.\n */\nfunction expandIpv6(ip: string): string | null {\n  // Basic structural validation\n  if (!ip || typeof ip !== \"string\") return null;\n\n  // Must contain at least one colon\n  if (!ip.includes(\":\")) return null;\n\n  // Check for invalid characters\n  if (!/^[0-9a-fA-F:]+$/.test(ip)) return null;\n\n  let normalized = ip;\n\n  // Handle :: compression\n  if (normalized.includes(\"::\")) {\n    const parts = normalized.split(\"::\");\n    if (parts.length > 2) return null; // Multiple :: is invalid\n\n    const [left, right] = parts;\n    const leftParts = left ? left.split(\":\") : [];\n    const rightParts = right ? right.split(\":\") : [];\n    const missing = 8 - (leftParts.length + rightParts.length);\n\n    if (missing < 0) return null;\n\n    const zeros = Array(missing).fill(\"0\");\n    normalized = [...leftParts, ...zeros, ...rightParts]\n      .filter((p) => p !== \"\")\n      .join(\":\");\n  }\n\n  const parts = normalized.split(\":\");\n  if (parts.length !== 8) return null;\n\n  // Validate each part is a valid hex group (1-4 chars)\n  for (const part of parts) {\n    if (part.length === 0 || part.length > 4) return null;\n    if (!/^[0-9a-fA-F]+$/.test(part)) return null;\n  }\n\n  return parts.map((p) => p.padStart(4, \"0\").toLowerCase()).join(\":\");\n}\n\n/**\n * Parse CIDR notation (e.g., \"192.168.0.0/24\") into network address and prefix length.\n */\nfunction parseCidr(\n  cidr: string\n): { addr: number[]; prefixLen: number; isIpv6: boolean } | null {\n  const [addrStr, prefixStr] = cidr.split(\"/\");\n  if (!addrStr || !prefixStr) {\n    return null;\n  }\n\n  const addr = parseIp(addrStr);\n  if (!addr) {\n    return null;\n  }\n\n  const prefixLen = parseInt(prefixStr, 10);\n  if (isNaN(prefixLen)) {\n    return null;\n  }\n\n  const isIpv6 = isIPv6(addrStr);\n\n  if (isIpv6 && prefixLen > 128) {\n    return null;\n  }\n  if (!isIpv6 && prefixLen > 32) {\n    return null;\n  }\n\n  return { addr, prefixLen, isIpv6 };\n}\n\n/**\n * Check if an IP address is in a given CIDR range.\n */\nfunction isIpInCidr(ip: string, cidr: string): boolean {\n  const ipParsed = parseIp(ip);\n  if (!ipParsed) {\n    return false;\n  }\n\n  const cidrParsed = parseCidr(cidr);\n  if (!cidrParsed) {\n    return false;\n  }\n\n  // Check IPv4 vs IPv6 mismatch\n  const isIpv6 = isIPv6(ip);\n  if (isIpv6 !== cidrParsed.isIpv6) {\n    return false;\n  }\n\n  const { addr: cidrAddr, prefixLen } = cidrParsed;\n\n  // Convert to bits and compare\n  if (isIpv6) {\n    // IPv6: each element is 16 bits\n    for (let i = 0; i < Math.ceil(prefixLen / 16); i++) {\n      const bitsToCheck = Math.min(16, prefixLen - i * 16);\n      const mask = (0xffff << (16 - bitsToCheck)) & 0xffff;\n      if ((ipParsed[i] & mask) !== (cidrAddr[i] & mask)) {\n        return false;\n      }\n    }\n  } else {\n    // IPv4: each element is 8 bits\n    for (let i = 0; i < Math.ceil(prefixLen / 8); i++) {\n      const bitsToCheck = Math.min(8, prefixLen - i * 8);\n      const mask = (0xff << (8 - bitsToCheck)) & 0xff;\n      if ((ipParsed[i] & mask) !== (cidrAddr[i] & mask)) {\n        return false;\n      }\n    }\n  }\n\n  return true;\n}\n\n/**\n * Check if an IP address is private (RFC 1918, loopback, link-local, etc.)\n */\nexport function isPrivateIp(ip: string): boolean {\n  // Validate it's a proper IP\n  if (!isIP(ip)) {\n    return false;\n  }\n\n  for (const range of PRIVATE_IP_RANGES) {\n    if (isIpInCidr(ip, range)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\n/**\n * Check if a hostname or IP is a known cloud metadata endpoint.\n */\nexport function isCloudMetadata(hostname: string, ip?: string): boolean {\n  // Check if it's a known metadata IP\n  if (CLOUD_METADATA_IPS.includes(ip || \"\")) {\n    return true;\n  }\n\n  // Check if hostname matches (case-insensitive)\n  const lowerHostname = hostname.toLowerCase();\n  if (CLOUD_METADATA_HOSTNAMES.includes(lowerHostname)) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Check if a hostname or IP is localhost.\n */\nexport function isLocalhost(hostname: string, ip?: string): boolean {\n  // Check if it's a localhost IP\n  if (ip) {\n    // Check for typical localhost IPs (loopback range)\n    if (ip === \"127.0.0.1\" || ip === \"::1\" || ip === \"0.0.0.0\") {\n      return true;\n    }\n    // Check if IP starts with 127. (entire loopback range)\n    if (ip.startsWith(\"127.\")) {\n      return true;\n    }\n  }\n\n  // Check if hostname is localhost\n  const lowerHostname = hostname.toLowerCase();\n  if (LOCALHOST_NAMES.includes(lowerHostname)) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Validate that a URL is safe to connect to.\n * Performs static validation checks against hostnames and direct IP addresses.\n * Does not perform DNS resolution.\n *\n * @param url URL to validate\n * @param options.allowPrivate Allow private IPs (default: false)\n * @param options.allowHttp Allow http:// scheme (default: false)\n * @returns The validated URL\n * @throws Error if URL is not safe\n */\nexport function validateSafeUrl(\n  url: string,\n  options?: { allowPrivate?: boolean; allowHttp?: boolean }\n): string {\n  const allowPrivate = options?.allowPrivate ?? false;\n  const allowHttp = options?.allowHttp ?? false;\n\n  try {\n    let parsedUrl: URL;\n    try {\n      parsedUrl = new URL(url);\n    } catch {\n      throw new Error(`Invalid URL: ${url}`);\n    }\n\n    const hostname = parsedUrl.hostname;\n    if (!hostname) {\n      throw new Error(\"URL missing hostname.\");\n    }\n\n    // Check if it's a cloud metadata endpoint (always blocked)\n    if (isCloudMetadata(hostname)) {\n      throw new Error(`URL points to cloud metadata endpoint: ${hostname}`);\n    }\n\n    // Check if it's localhost (blocked unless allowPrivate is true)\n    if (isLocalhost(hostname)) {\n      if (!allowPrivate) {\n        throw new Error(`URL points to localhost: ${hostname}`);\n      }\n      return url;\n    }\n\n    // Check scheme (after localhost checks to give better error messages)\n    const scheme = parsedUrl.protocol;\n    if (scheme !== \"http:\" && scheme !== \"https:\") {\n      throw new Error(\n        `Invalid URL scheme: ${scheme}. Only http and https are allowed.`\n      );\n    }\n\n    if (scheme === \"http:\" && !allowHttp) {\n      throw new Error(\n        \"HTTP scheme not allowed. Use HTTPS or set allowHttp: true.\"\n      );\n    }\n\n    // If hostname is already an IP, validate it directly\n    if (isIP(hostname)) {\n      const ip = hostname;\n\n      // Check if it's localhost first (before private IP check)\n      if (isLocalhost(hostname, ip)) {\n        if (!allowPrivate) {\n          throw new Error(`URL points to localhost: ${hostname}`);\n        }\n        return url;\n      }\n\n      // Cloud metadata is always blocked\n      if (isCloudMetadata(hostname, ip)) {\n        throw new Error(\n          `URL resolves to cloud metadata IP: ${ip} (${hostname})`\n        );\n      }\n\n      // Check private IPs\n      if (isPrivateIp(ip)) {\n        if (!allowPrivate) {\n          throw new Error(\n            `URL resolves to private IP: ${ip} (${hostname}). Set allowPrivate: true to allow.`\n          );\n        }\n      }\n\n      return url;\n    }\n\n    // For regular hostnames, we've already done all hostname-based checks above\n    // (cloud metadata, localhost). If those passed, the URL is safe.\n    // We don't perform DNS resolution in this environment-agnostic function.\n    return url;\n  } catch (error) {\n    if (error && typeof error === \"object\" && \"message\" in error) {\n      throw error;\n    }\n    throw new Error(`URL validation failed: ${error}`);\n  }\n}\n\n/**\n * Check if a URL is safe to connect to (non-throwing version).\n *\n * @param url URL to check\n * @param options.allowPrivate Allow private IPs (default: false)\n * @param options.allowHttp Allow http:// scheme (default: false)\n * @returns true if URL is safe, false otherwise\n */\nexport function isSafeUrl(\n  url: string,\n  options?: { allowPrivate?: boolean; allowHttp?: boolean }\n): boolean {\n  try {\n    validateSafeUrl(url, options);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Check if two URLs have the same origin (scheme, host, port).\n * Uses semantic URL parsing to prevent SSRF bypasses via URL variations.\n *\n * @param url1 First URL\n * @param url2 Second URL\n * @returns true if both URLs have the same origin, false otherwise\n */\nexport function isSameOrigin(url1: string, url2: string): boolean {\n  try {\n    return new URL(url1).origin === new URL(url2).origin;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;;;;;;AACA,MAAM,oBAAoB;CACxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD;AAGD,MAAM,qBAAqB;CACzB;CACA;CACA;AACD;AAGD,MAAM,2BAA2B;CAC/B;CACA;CACA;AACD;AAGD,MAAM,kBAAkB,CAAC,aAAa,uBAAwB;;;;AAK9D,MAAM,aACJ;;;;AAKF,SAAS,OAAOA,IAAqB;AACnC,QAAO,WAAW,KAAK,GAAG;AAC3B;;;;;AAMD,SAAS,OAAOA,IAAqB;AACnC,QAAO,WAAW,GAAG,KAAK;AAC3B;;;;AAKD,SAAS,KAAKA,IAAqB;AACjC,QAAO,OAAO,GAAG,IAAI,OAAO,GAAG;AAChC;;;;;AAMD,SAAS,QAAQA,IAA6B;AAC5C,KAAI,OAAO,GAAG,CACZ,QAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,SAAS,OAAO,GAAG,CAAC;UAC/C,OAAO,GAAG,EAAE;EAErB,MAAM,WAAW,WAAW,GAAG;AAC/B,MAAI,CAAC,SAAU,QAAO;EACtB,MAAM,QAAQ,SAAS,MAAM,IAAI;EACjC,MAAMC,SAAmB,CAAE;AAC3B,OAAK,MAAM,QAAQ,OACjB,OAAO,KAAK,SAAS,MAAM,GAAG,CAAC;AAEjC,SAAO;CACR;AACD,QAAO;AACR;;;;AAKD,SAAS,WAAWD,IAA2B;AAE7C,KAAI,CAAC,MAAM,OAAO,OAAO,SAAU,QAAO;AAG1C,KAAI,CAAC,GAAG,SAAS,IAAI,CAAE,QAAO;AAG9B,KAAI,CAAC,kBAAkB,KAAK,GAAG,CAAE,QAAO;CAExC,IAAI,aAAa;AAGjB,KAAI,WAAW,SAAS,KAAK,EAAE;EAC7B,MAAME,UAAQ,WAAW,MAAM,KAAK;AACpC,MAAIA,QAAM,SAAS,EAAG,QAAO;EAE7B,MAAM,CAAC,MAAM,MAAM,GAAGA;EACtB,MAAM,YAAY,OAAO,KAAK,MAAM,IAAI,GAAG,CAAE;EAC7C,MAAM,aAAa,QAAQ,MAAM,MAAM,IAAI,GAAG,CAAE;EAChD,MAAM,UAAU,KAAK,UAAU,SAAS,WAAW;AAEnD,MAAI,UAAU,EAAG,QAAO;EAExB,MAAM,QAAQ,MAAM,QAAQ,CAAC,KAAK,IAAI;EACtC,aAAa;GAAC,GAAG;GAAW,GAAG;GAAO,GAAG;EAAW,EACjD,OAAO,CAAC,MAAM,MAAM,GAAG,CACvB,KAAK,IAAI;CACb;CAED,MAAM,QAAQ,WAAW,MAAM,IAAI;AACnC,KAAI,MAAM,WAAW,EAAG,QAAO;AAG/B,MAAK,MAAM,QAAQ,OAAO;AACxB,MAAI,KAAK,WAAW,KAAK,KAAK,SAAS,EAAG,QAAO;AACjD,MAAI,CAAC,iBAAiB,KAAK,KAAK,CAAE,QAAO;CAC1C;AAED,QAAO,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,IAAI;AACpE;;;;AAKD,SAAS,UACPC,MAC+D;CAC/D,MAAM,CAAC,SAAS,UAAU,GAAG,KAAK,MAAM,IAAI;AAC5C,KAAI,CAAC,WAAW,CAAC,UACf,QAAO;CAGT,MAAM,OAAO,QAAQ,QAAQ;AAC7B,KAAI,CAAC,KACH,QAAO;CAGT,MAAM,YAAY,SAAS,WAAW,GAAG;AACzC,KAAI,MAAM,UAAU,CAClB,QAAO;CAGT,MAAM,SAAS,OAAO,QAAQ;AAE9B,KAAI,UAAU,YAAY,IACxB,QAAO;AAET,KAAI,CAAC,UAAU,YAAY,GACzB,QAAO;AAGT,QAAO;EAAE;EAAM;EAAW;CAAQ;AACnC;;;;AAKD,SAAS,WAAWH,IAAYG,MAAuB;CACrD,MAAM,WAAW,QAAQ,GAAG;AAC5B,KAAI,CAAC,SACH,QAAO;CAGT,MAAM,aAAa,UAAU,KAAK;AAClC,KAAI,CAAC,WACH,QAAO;CAIT,MAAM,SAAS,OAAO,GAAG;AACzB,KAAI,WAAW,WAAW,OACxB,QAAO;CAGT,MAAM,EAAE,MAAM,UAAU,WAAW,GAAG;AAGtC,KAAI,OAEF,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,KAAK,YAAY,GAAG,EAAE,KAAK;EAClD,MAAM,cAAc,KAAK,IAAI,IAAI,YAAY,IAAI,GAAG;EACpD,MAAM,OAAQ,SAAW,KAAK,cAAgB;AAC9C,OAAK,SAAS,KAAK,WAAW,SAAS,KAAK,MAC1C,QAAO;CAEV;KAGD,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,KAAK,YAAY,EAAE,EAAE,KAAK;EACjD,MAAM,cAAc,KAAK,IAAI,GAAG,YAAY,IAAI,EAAE;EAClD,MAAM,OAAQ,OAAS,IAAI,cAAgB;AAC3C,OAAK,SAAS,KAAK,WAAW,SAAS,KAAK,MAC1C,QAAO;CAEV;AAGH,QAAO;AACR;;;;AAKD,SAAgB,YAAYH,IAAqB;AAE/C,KAAI,CAAC,KAAK,GAAG,CACX,QAAO;AAGT,MAAK,MAAM,SAAS,kBAClB,KAAI,WAAW,IAAI,MAAM,CACvB,QAAO;AAIX,QAAO;AACR;;;;AAKD,SAAgB,gBAAgBI,UAAkBC,IAAsB;AAEtE,KAAI,mBAAmB,SAAS,MAAM,GAAG,CACvC,QAAO;CAIT,MAAM,gBAAgB,SAAS,aAAa;AAC5C,KAAI,yBAAyB,SAAS,cAAc,CAClD,QAAO;AAGT,QAAO;AACR;;;;AAKD,SAAgB,YAAYD,UAAkBC,IAAsB;AAElE,KAAI,IAAI;AAEN,MAAI,OAAO,eAAe,OAAO,SAAS,OAAO,UAC/C,QAAO;AAGT,MAAI,GAAG,WAAW,OAAO,CACvB,QAAO;CAEV;CAGD,MAAM,gBAAgB,SAAS,aAAa;AAC5C,KAAI,gBAAgB,SAAS,cAAc,CACzC,QAAO;AAGT,QAAO;AACR;;;;;;;;;;;;AAaD,SAAgB,gBACdC,KACAC,SACQ;CACR,MAAM,eAAe,SAAS,gBAAgB;CAC9C,MAAM,YAAY,SAAS,aAAa;AAExC,KAAI;EACF,IAAIC;AACJ,MAAI;GACF,YAAY,IAAI,IAAI;EACrB,QAAO;AACN,SAAM,IAAI,MAAM,CAAC,aAAa,EAAE,KAAK;EACtC;EAED,MAAM,WAAW,UAAU;AAC3B,MAAI,CAAC,SACH,OAAM,IAAI,MAAM;AAIlB,MAAI,gBAAgB,SAAS,CAC3B,OAAM,IAAI,MAAM,CAAC,uCAAuC,EAAE,UAAU;AAItE,MAAI,YAAY,SAAS,EAAE;AACzB,OAAI,CAAC,aACH,OAAM,IAAI,MAAM,CAAC,yBAAyB,EAAE,UAAU;AAExD,UAAO;EACR;EAGD,MAAM,SAAS,UAAU;AACzB,MAAI,WAAW,WAAW,WAAW,SACnC,OAAM,IAAI,MACR,CAAC,oBAAoB,EAAE,OAAO,kCAAkC,CAAC;AAIrE,MAAI,WAAW,WAAW,CAAC,UACzB,OAAM,IAAI,MACR;AAKJ,MAAI,KAAK,SAAS,EAAE;GAClB,MAAM,KAAK;AAGX,OAAI,YAAY,UAAU,GAAG,EAAE;AAC7B,QAAI,CAAC,aACH,OAAM,IAAI,MAAM,CAAC,yBAAyB,EAAE,UAAU;AAExD,WAAO;GACR;AAGD,OAAI,gBAAgB,UAAU,GAAG,CAC/B,OAAM,IAAI,MACR,CAAC,mCAAmC,EAAE,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;AAK5D,OAAI,YAAY,GAAG,EACjB;QAAI,CAAC,aACH,OAAM,IAAI,MACR,CAAC,4BAA4B,EAAE,GAAG,EAAE,EAAE,SAAS,mCAAmC,CAAC;GAEtF;AAGH,UAAO;EACR;AAKD,SAAO;CACR,SAAQ,OAAO;AACd,MAAI,SAAS,OAAO,UAAU,YAAY,aAAa,MACrD,OAAM;AAER,QAAM,IAAI,MAAM,CAAC,uBAAuB,EAAE,OAAO;CAClD;AACF;;;;;;;;;AAUD,SAAgB,UACdF,KACAC,SACS;AACT,KAAI;EACF,gBAAgB,KAAK,QAAQ;AAC7B,SAAO;CACR,QAAO;AACN,SAAO;CACR;AACF;;;;;;;;;AAUD,SAAgB,aAAaE,MAAcC,MAAuB;AAChE,KAAI;AACF,SAAO,IAAI,IAAI,MAAM,WAAW,IAAI,IAAI,MAAM;CAC/C,QAAO;AACN,SAAO;CACR;AACF"}

package/dist/utils/ssrf.d.cts

@@ -0,0 +1,52 @@
+//#region src/utils/ssrf.d.ts
+/**
+ * Check if an IP address is private (RFC 1918, loopback, link-local, etc.)
+ */
+declare function isPrivateIp(ip: string): boolean;
+/**
+ * Check if a hostname or IP is a known cloud metadata endpoint.
+ */
+declare function isCloudMetadata(hostname: string, ip?: string): boolean;
+/**
+ * Check if a hostname or IP is localhost.
+ */
+declare function isLocalhost(hostname: string, ip?: string): boolean;
+/**
+ * Validate that a URL is safe to connect to.
+ * Performs static validation checks against hostnames and direct IP addresses.
+ * Does not perform DNS resolution.
+ *
+ * @param url URL to validate
+ * @param options.allowPrivate Allow private IPs (default: false)
+ * @param options.allowHttp Allow http:// scheme (default: false)
+ * @returns The validated URL
+ * @throws Error if URL is not safe
+ */
+declare function validateSafeUrl(url: string, options?: {
+  allowPrivate?: boolean;
+  allowHttp?: boolean;
+}): string;
+/**
+ * Check if a URL is safe to connect to (non-throwing version).
+ *
+ * @param url URL to check
+ * @param options.allowPrivate Allow private IPs (default: false)
+ * @param options.allowHttp Allow http:// scheme (default: false)
+ * @returns true if URL is safe, false otherwise
+ */
+declare function isSafeUrl(url: string, options?: {
+  allowPrivate?: boolean;
+  allowHttp?: boolean;
+}): boolean;
+/**
+ * Check if two URLs have the same origin (scheme, host, port).
+ * Uses semantic URL parsing to prevent SSRF bypasses via URL variations.
+ *
+ * @param url1 First URL
+ * @param url2 Second URL
+ * @returns true if both URLs have the same origin, false otherwise
+ */
+declare function isSameOrigin(url1: string, url2: string): boolean;
+//#endregion
+export { isCloudMetadata, isLocalhost, isPrivateIp, isSafeUrl, isSameOrigin, validateSafeUrl };
+//# sourceMappingURL=ssrf.d.cts.map

package/dist/utils/ssrf.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.d.cts","names":["isPrivateIp","isCloudMetadata","isLocalhost","validateSafeUrl","isSafeUrl","isSameOrigin"],"sources":["../../src/utils/ssrf.d.ts"],"sourcesContent":["/**\n * Check if an IP address is private (RFC 1918, loopback, link-local, etc.)\n */\nexport declare function isPrivateIp(ip: string): boolean;\n/**\n * Check if a hostname or IP is a known cloud metadata endpoint.\n */\nexport declare function isCloudMetadata(hostname: string, ip?: string): boolean;\n/**\n * Check if a hostname or IP is localhost.\n */\nexport declare function isLocalhost(hostname: string, ip?: string): boolean;\n/**\n * Validate that a URL is safe to connect to.\n * Performs static validation checks against hostnames and direct IP addresses.\n * Does not perform DNS resolution.\n *\n * @param url URL to validate\n * @param options.allowPrivate Allow private IPs (default: false)\n * @param options.allowHttp Allow http:// scheme (default: false)\n * @returns The validated URL\n * @throws Error if URL is not safe\n */\nexport declare function validateSafeUrl(url: string, options?: {\n    allowPrivate?: boolean;\n    allowHttp?: boolean;\n}): string;\n/**\n * Check if a URL is safe to connect to (non-throwing version).\n *\n * @param url URL to check\n * @param options.allowPrivate Allow private IPs (default: false)\n * @param options.allowHttp Allow http:// scheme (default: false)\n * @returns true if URL is safe, false otherwise\n */\nexport declare function isSafeUrl(url: string, options?: {\n    allowPrivate?: boolean;\n    allowHttp?: boolean;\n}): boolean;\n/**\n * Check if two URLs have the same origin (scheme, host, port).\n * Uses semantic URL parsing to prevent SSRF bypasses via URL variations.\n *\n * @param url1 First URL\n * @param url2 Second URL\n * @returns true if both URLs have the same origin, false otherwise\n */\nexport declare function isSameOrigin(url1: string, url2: string): boolean;\n//# sourceMappingURL=ssrf.d.ts.map"],"mappings":";;AAGA;AAIA;AAIwBE,iBARAF,WAAAA,CAQW,EAAA,EAAA,MAAA,CAAA,EAAA,OAAA;AAYnC;AAYA;AAYA;iBAxCwBC,eAAAA;;;;iBAIAC,WAAAA;;;;;;;;;;;;iBAYAC,eAAAA;;;;;;;;;;;;iBAYAC,SAAAA;;;;;;;;;;;;iBAYAC,YAAAA"}

package/dist/utils/ssrf.d.ts

@@ -0,0 +1,52 @@
+//#region src/utils/ssrf.d.ts
+/**
+ * Check if an IP address is private (RFC 1918, loopback, link-local, etc.)
+ */
+declare function isPrivateIp(ip: string): boolean;
+/**
+ * Check if a hostname or IP is a known cloud metadata endpoint.
+ */
+declare function isCloudMetadata(hostname: string, ip?: string): boolean;
+/**
+ * Check if a hostname or IP is localhost.
+ */
+declare function isLocalhost(hostname: string, ip?: string): boolean;
+/**
+ * Validate that a URL is safe to connect to.
+ * Performs static validation checks against hostnames and direct IP addresses.
+ * Does not perform DNS resolution.
+ *
+ * @param url URL to validate
+ * @param options.allowPrivate Allow private IPs (default: false)
+ * @param options.allowHttp Allow http:// scheme (default: false)
+ * @returns The validated URL
+ * @throws Error if URL is not safe
+ */
+declare function validateSafeUrl(url: string, options?: {
+  allowPrivate?: boolean;
+  allowHttp?: boolean;
+}): string;
+/**
+ * Check if a URL is safe to connect to (non-throwing version).
+ *
+ * @param url URL to check
+ * @param options.allowPrivate Allow private IPs (default: false)
+ * @param options.allowHttp Allow http:// scheme (default: false)
+ * @returns true if URL is safe, false otherwise
+ */
+declare function isSafeUrl(url: string, options?: {
+  allowPrivate?: boolean;
+  allowHttp?: boolean;
+}): boolean;
+/**
+ * Check if two URLs have the same origin (scheme, host, port).
+ * Uses semantic URL parsing to prevent SSRF bypasses via URL variations.
+ *
+ * @param url1 First URL
+ * @param url2 Second URL
+ * @returns true if both URLs have the same origin, false otherwise
+ */
+declare function isSameOrigin(url1: string, url2: string): boolean;
+//#endregion
+export { isCloudMetadata, isLocalhost, isPrivateIp, isSafeUrl, isSameOrigin, validateSafeUrl };
+//# sourceMappingURL=ssrf.d.ts.map

package/dist/utils/ssrf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.d.ts","names":["isPrivateIp","isCloudMetadata","isLocalhost","validateSafeUrl","isSafeUrl","isSameOrigin"],"sources":["../../src/utils/ssrf.d.ts"],"sourcesContent":["/**\n * Check if an IP address is private (RFC 1918, loopback, link-local, etc.)\n */\nexport declare function isPrivateIp(ip: string): boolean;\n/**\n * Check if a hostname or IP is a known cloud metadata endpoint.\n */\nexport declare function isCloudMetadata(hostname: string, ip?: string): boolean;\n/**\n * Check if a hostname or IP is localhost.\n */\nexport declare function isLocalhost(hostname: string, ip?: string): boolean;\n/**\n * Validate that a URL is safe to connect to.\n * Performs static validation checks against hostnames and direct IP addresses.\n * Does not perform DNS resolution.\n *\n * @param url URL to validate\n * @param options.allowPrivate Allow private IPs (default: false)\n * @param options.allowHttp Allow http:// scheme (default: false)\n * @returns The validated URL\n * @throws Error if URL is not safe\n */\nexport declare function validateSafeUrl(url: string, options?: {\n    allowPrivate?: boolean;\n    allowHttp?: boolean;\n}): string;\n/**\n * Check if a URL is safe to connect to (non-throwing version).\n *\n * @param url URL to check\n * @param options.allowPrivate Allow private IPs (default: false)\n * @param options.allowHttp Allow http:// scheme (default: false)\n * @returns true if URL is safe, false otherwise\n */\nexport declare function isSafeUrl(url: string, options?: {\n    allowPrivate?: boolean;\n    allowHttp?: boolean;\n}): boolean;\n/**\n * Check if two URLs have the same origin (scheme, host, port).\n * Uses semantic URL parsing to prevent SSRF bypasses via URL variations.\n *\n * @param url1 First URL\n * @param url2 Second URL\n * @returns true if both URLs have the same origin, false otherwise\n */\nexport declare function isSameOrigin(url1: string, url2: string): boolean;\n//# sourceMappingURL=ssrf.d.ts.map"],"mappings":";;AAGA;AAIA;AAIwBE,iBARAF,WAAAA,CAQW,EAAA,EAAA,MAAA,CAAA,EAAA,OAAA;AAYnC;AAYA;AAYA;iBAxCwBC,eAAAA;;;;iBAIAC,WAAAA;;;;;;;;;;;;iBAYAC,eAAAA;;;;;;;;;;;;iBAYAC,SAAAA;;;;;;;;;;;;iBAYAC,YAAAA"}

package/dist/utils/ssrf.js

@@ -0,0 +1,260 @@
+import { __export } from "../_virtual/rolldown_runtime.js";
+
+//#region src/utils/ssrf.ts
+var ssrf_exports = {};
+__export(ssrf_exports, {
+	isCloudMetadata: () => isCloudMetadata,
+	isLocalhost: () => isLocalhost,
+	isPrivateIp: () => isPrivateIp,
+	isSafeUrl: () => isSafeUrl,
+	isSameOrigin: () => isSameOrigin,
+	validateSafeUrl: () => validateSafeUrl
+});
+const PRIVATE_IP_RANGES = [
+	"10.0.0.0/8",
+	"172.16.0.0/12",
+	"192.168.0.0/16",
+	"127.0.0.0/8",
+	"169.254.0.0/16",
+	"0.0.0.0/8",
+	"::1/128",
+	"fc00::/7",
+	"fe80::/10",
+	"ff00::/8"
+];
+const CLOUD_METADATA_IPS = [
+	"169.254.169.254",
+	"169.254.170.2",
+	"100.100.100.200"
+];
+const CLOUD_METADATA_HOSTNAMES = [
+	"metadata.google.internal",
+	"metadata",
+	"instance-data"
+];
+const LOCALHOST_NAMES = ["localhost", "localhost.localdomain"];
+/**
+* IPv4 regex: four octets 0-255
+*/
+const IPV4_REGEX = /^(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)$/;
+/**
+* Check if a string is a valid IPv4 address.
+*/
+function isIPv4(ip) {
+	return IPV4_REGEX.test(ip);
+}
+/**
+* Check if a string is a valid IPv6 address.
+* Uses expandIpv6 for validation.
+*/
+function isIPv6(ip) {
+	return expandIpv6(ip) !== null;
+}
+/**
+* Check if a string is a valid IP address (IPv4 or IPv6).
+*/
+function isIP(ip) {
+	return isIPv4(ip) || isIPv6(ip);
+}
+/**
+* Parse an IP address string to an array of integers (for IPv4) or an array of 16-bit values (for IPv6)
+* Returns null if the IP is invalid.
+*/
+function parseIp(ip) {
+	if (isIPv4(ip)) return ip.split(".").map((octet) => parseInt(octet, 10));
+	else if (isIPv6(ip)) {
+		const expanded = expandIpv6(ip);
+		if (!expanded) return null;
+		const parts = expanded.split(":");
+		const result = [];
+		for (const part of parts) result.push(parseInt(part, 16));
+		return result;
+	}
+	return null;
+}
+/**
+* Expand compressed IPv6 address to full form.
+*/
+function expandIpv6(ip) {
+	if (!ip || typeof ip !== "string") return null;
+	if (!ip.includes(":")) return null;
+	if (!/^[0-9a-fA-F:]+$/.test(ip)) return null;
+	let normalized = ip;
+	if (normalized.includes("::")) {
+		const parts$1 = normalized.split("::");
+		if (parts$1.length > 2) return null;
+		const [left, right] = parts$1;
+		const leftParts = left ? left.split(":") : [];
+		const rightParts = right ? right.split(":") : [];
+		const missing = 8 - (leftParts.length + rightParts.length);
+		if (missing < 0) return null;
+		const zeros = Array(missing).fill("0");
+		normalized = [
+			...leftParts,
+			...zeros,
+			...rightParts
+		].filter((p) => p !== "").join(":");
+	}
+	const parts = normalized.split(":");
+	if (parts.length !== 8) return null;
+	for (const part of parts) {
+		if (part.length === 0 || part.length > 4) return null;
+		if (!/^[0-9a-fA-F]+$/.test(part)) return null;
+	}
+	return parts.map((p) => p.padStart(4, "0").toLowerCase()).join(":");
+}
+/**
+* Parse CIDR notation (e.g., "192.168.0.0/24") into network address and prefix length.
+*/
+function parseCidr(cidr) {
+	const [addrStr, prefixStr] = cidr.split("/");
+	if (!addrStr || !prefixStr) return null;
+	const addr = parseIp(addrStr);
+	if (!addr) return null;
+	const prefixLen = parseInt(prefixStr, 10);
+	if (isNaN(prefixLen)) return null;
+	const isIpv6 = isIPv6(addrStr);
+	if (isIpv6 && prefixLen > 128) return null;
+	if (!isIpv6 && prefixLen > 32) return null;
+	return {
+		addr,
+		prefixLen,
+		isIpv6
+	};
+}
+/**
+* Check if an IP address is in a given CIDR range.
+*/
+function isIpInCidr(ip, cidr) {
+	const ipParsed = parseIp(ip);
+	if (!ipParsed) return false;
+	const cidrParsed = parseCidr(cidr);
+	if (!cidrParsed) return false;
+	const isIpv6 = isIPv6(ip);
+	if (isIpv6 !== cidrParsed.isIpv6) return false;
+	const { addr: cidrAddr, prefixLen } = cidrParsed;
+	if (isIpv6) for (let i = 0; i < Math.ceil(prefixLen / 16); i++) {
+		const bitsToCheck = Math.min(16, prefixLen - i * 16);
+		const mask = 65535 << 16 - bitsToCheck & 65535;
+		if ((ipParsed[i] & mask) !== (cidrAddr[i] & mask)) return false;
+	}
+	else for (let i = 0; i < Math.ceil(prefixLen / 8); i++) {
+		const bitsToCheck = Math.min(8, prefixLen - i * 8);
+		const mask = 255 << 8 - bitsToCheck & 255;
+		if ((ipParsed[i] & mask) !== (cidrAddr[i] & mask)) return false;
+	}
+	return true;
+}
+/**
+* Check if an IP address is private (RFC 1918, loopback, link-local, etc.)
+*/
+function isPrivateIp(ip) {
+	if (!isIP(ip)) return false;
+	for (const range of PRIVATE_IP_RANGES) if (isIpInCidr(ip, range)) return true;
+	return false;
+}
+/**
+* Check if a hostname or IP is a known cloud metadata endpoint.
+*/
+function isCloudMetadata(hostname, ip) {
+	if (CLOUD_METADATA_IPS.includes(ip || "")) return true;
+	const lowerHostname = hostname.toLowerCase();
+	if (CLOUD_METADATA_HOSTNAMES.includes(lowerHostname)) return true;
+	return false;
+}
+/**
+* Check if a hostname or IP is localhost.
+*/
+function isLocalhost(hostname, ip) {
+	if (ip) {
+		if (ip === "127.0.0.1" || ip === "::1" || ip === "0.0.0.0") return true;
+		if (ip.startsWith("127.")) return true;
+	}
+	const lowerHostname = hostname.toLowerCase();
+	if (LOCALHOST_NAMES.includes(lowerHostname)) return true;
+	return false;
+}
+/**
+* Validate that a URL is safe to connect to.
+* Performs static validation checks against hostnames and direct IP addresses.
+* Does not perform DNS resolution.
+*
+* @param url URL to validate
+* @param options.allowPrivate Allow private IPs (default: false)
+* @param options.allowHttp Allow http:// scheme (default: false)
+* @returns The validated URL
+* @throws Error if URL is not safe
+*/
+function validateSafeUrl(url, options) {
+	const allowPrivate = options?.allowPrivate ?? false;
+	const allowHttp = options?.allowHttp ?? false;
+	try {
+		let parsedUrl;
+		try {
+			parsedUrl = new URL(url);
+		} catch {
+			throw new Error(`Invalid URL: ${url}`);
+		}
+		const hostname = parsedUrl.hostname;
+		if (!hostname) throw new Error("URL missing hostname.");
+		if (isCloudMetadata(hostname)) throw new Error(`URL points to cloud metadata endpoint: ${hostname}`);
+		if (isLocalhost(hostname)) {
+			if (!allowPrivate) throw new Error(`URL points to localhost: ${hostname}`);
+			return url;
+		}
+		const scheme = parsedUrl.protocol;
+		if (scheme !== "http:" && scheme !== "https:") throw new Error(`Invalid URL scheme: ${scheme}. Only http and https are allowed.`);
+		if (scheme === "http:" && !allowHttp) throw new Error("HTTP scheme not allowed. Use HTTPS or set allowHttp: true.");
+		if (isIP(hostname)) {
+			const ip = hostname;
+			if (isLocalhost(hostname, ip)) {
+				if (!allowPrivate) throw new Error(`URL points to localhost: ${hostname}`);
+				return url;
+			}
+			if (isCloudMetadata(hostname, ip)) throw new Error(`URL resolves to cloud metadata IP: ${ip} (${hostname})`);
+			if (isPrivateIp(ip)) {
+				if (!allowPrivate) throw new Error(`URL resolves to private IP: ${ip} (${hostname}). Set allowPrivate: true to allow.`);
+			}
+			return url;
+		}
+		return url;
+	} catch (error) {
+		if (error && typeof error === "object" && "message" in error) throw error;
+		throw new Error(`URL validation failed: ${error}`);
+	}
+}
+/**
+* Check if a URL is safe to connect to (non-throwing version).
+*
+* @param url URL to check
+* @param options.allowPrivate Allow private IPs (default: false)
+* @param options.allowHttp Allow http:// scheme (default: false)
+* @returns true if URL is safe, false otherwise
+*/
+function isSafeUrl(url, options) {
+	try {
+		validateSafeUrl(url, options);
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Check if two URLs have the same origin (scheme, host, port).
+* Uses semantic URL parsing to prevent SSRF bypasses via URL variations.
+*
+* @param url1 First URL
+* @param url2 Second URL
+* @returns true if both URLs have the same origin, false otherwise
+*/
+function isSameOrigin(url1, url2) {
+	try {
+		return new URL(url1).origin === new URL(url2).origin;
+	} catch {
+		return false;
+	}
+}
+
+//#endregion
+export { isCloudMetadata, isLocalhost, isPrivateIp, isSafeUrl, isSameOrigin, ssrf_exports, validateSafeUrl };
+//# sourceMappingURL=ssrf.js.map

package/dist/utils/ssrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.js","names":["ip: string","result: number[]","parts","cidr: string","hostname: string","ip?: string","url: string","options?: { allowPrivate?: boolean; allowHttp?: boolean }","parsedUrl: URL","url1: string","url2: string"],"sources":["../../src/utils/ssrf.ts"],"sourcesContent":["// Private IP ranges (RFC 1918, loopback, link-local, etc.)\nconst PRIVATE_IP_RANGES = [\n  \"10.0.0.0/8\",\n  \"172.16.0.0/12\",\n  \"192.168.0.0/16\",\n  \"127.0.0.0/8\",\n  \"169.254.0.0/16\",\n  \"0.0.0.0/8\",\n  \"::1/128\",\n  \"fc00::/7\",\n  \"fe80::/10\",\n  \"ff00::/8\",\n];\n\n// Cloud metadata IPs\nconst CLOUD_METADATA_IPS = [\n  \"169.254.169.254\",\n  \"169.254.170.2\",\n  \"100.100.100.200\",\n];\n\n// Cloud metadata hostnames (case-insensitive)\nconst CLOUD_METADATA_HOSTNAMES = [\n  \"metadata.google.internal\",\n  \"metadata\",\n  \"instance-data\",\n];\n\n// Localhost variations\nconst LOCALHOST_NAMES = [\"localhost\", \"localhost.localdomain\"];\n\n/**\n * IPv4 regex: four octets 0-255\n */\nconst IPV4_REGEX =\n  /^(?:(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)\\.){3}(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)$/;\n\n/**\n * Check if a string is a valid IPv4 address.\n */\nfunction isIPv4(ip: string): boolean {\n  return IPV4_REGEX.test(ip);\n}\n\n/**\n * Check if a string is a valid IPv6 address.\n * Uses expandIpv6 for validation.\n */\nfunction isIPv6(ip: string): boolean {\n  return expandIpv6(ip) !== null;\n}\n\n/**\n * Check if a string is a valid IP address (IPv4 or IPv6).\n */\nfunction isIP(ip: string): boolean {\n  return isIPv4(ip) || isIPv6(ip);\n}\n\n/**\n * Parse an IP address string to an array of integers (for IPv4) or an array of 16-bit values (for IPv6)\n * Returns null if the IP is invalid.\n */\nfunction parseIp(ip: string): number[] | null {\n  if (isIPv4(ip)) {\n    return ip.split(\".\").map((octet) => parseInt(octet, 10));\n  } else if (isIPv6(ip)) {\n    // Normalize IPv6\n    const expanded = expandIpv6(ip);\n    if (!expanded) return null;\n    const parts = expanded.split(\":\");\n    const result: number[] = [];\n    for (const part of parts) {\n      result.push(parseInt(part, 16));\n    }\n    return result;\n  }\n  return null;\n}\n\n/**\n * Expand compressed IPv6 address to full form.\n */\nfunction expandIpv6(ip: string): string | null {\n  // Basic structural validation\n  if (!ip || typeof ip !== \"string\") return null;\n\n  // Must contain at least one colon\n  if (!ip.includes(\":\")) return null;\n\n  // Check for invalid characters\n  if (!/^[0-9a-fA-F:]+$/.test(ip)) return null;\n\n  let normalized = ip;\n\n  // Handle :: compression\n  if (normalized.includes(\"::\")) {\n    const parts = normalized.split(\"::\");\n    if (parts.length > 2) return null; // Multiple :: is invalid\n\n    const [left, right] = parts;\n    const leftParts = left ? left.split(\":\") : [];\n    const rightParts = right ? right.split(\":\") : [];\n    const missing = 8 - (leftParts.length + rightParts.length);\n\n    if (missing < 0) return null;\n\n    const zeros = Array(missing).fill(\"0\");\n    normalized = [...leftParts, ...zeros, ...rightParts]\n      .filter((p) => p !== \"\")\n      .join(\":\");\n  }\n\n  const parts = normalized.split(\":\");\n  if (parts.length !== 8) return null;\n\n  // Validate each part is a valid hex group (1-4 chars)\n  for (const part of parts) {\n    if (part.length === 0 || part.length > 4) return null;\n    if (!/^[0-9a-fA-F]+$/.test(part)) return null;\n  }\n\n  return parts.map((p) => p.padStart(4, \"0\").toLowerCase()).join(\":\");\n}\n\n/**\n * Parse CIDR notation (e.g., \"192.168.0.0/24\") into network address and prefix length.\n */\nfunction parseCidr(\n  cidr: string\n): { addr: number[]; prefixLen: number; isIpv6: boolean } | null {\n  const [addrStr, prefixStr] = cidr.split(\"/\");\n  if (!addrStr || !prefixStr) {\n    return null;\n  }\n\n  const addr = parseIp(addrStr);\n  if (!addr) {\n    return null;\n  }\n\n  const prefixLen = parseInt(prefixStr, 10);\n  if (isNaN(prefixLen)) {\n    return null;\n  }\n\n  const isIpv6 = isIPv6(addrStr);\n\n  if (isIpv6 && prefixLen > 128) {\n    return null;\n  }\n  if (!isIpv6 && prefixLen > 32) {\n    return null;\n  }\n\n  return { addr, prefixLen, isIpv6 };\n}\n\n/**\n * Check if an IP address is in a given CIDR range.\n */\nfunction isIpInCidr(ip: string, cidr: string): boolean {\n  const ipParsed = parseIp(ip);\n  if (!ipParsed) {\n    return false;\n  }\n\n  const cidrParsed = parseCidr(cidr);\n  if (!cidrParsed) {\n    return false;\n  }\n\n  // Check IPv4 vs IPv6 mismatch\n  const isIpv6 = isIPv6(ip);\n  if (isIpv6 !== cidrParsed.isIpv6) {\n    return false;\n  }\n\n  const { addr: cidrAddr, prefixLen } = cidrParsed;\n\n  // Convert to bits and compare\n  if (isIpv6) {\n    // IPv6: each element is 16 bits\n    for (let i = 0; i < Math.ceil(prefixLen / 16); i++) {\n      const bitsToCheck = Math.min(16, prefixLen - i * 16);\n      const mask = (0xffff << (16 - bitsToCheck)) & 0xffff;\n      if ((ipParsed[i] & mask) !== (cidrAddr[i] & mask)) {\n        return false;\n      }\n    }\n  } else {\n    // IPv4: each element is 8 bits\n    for (let i = 0; i < Math.ceil(prefixLen / 8); i++) {\n      const bitsToCheck = Math.min(8, prefixLen - i * 8);\n      const mask = (0xff << (8 - bitsToCheck)) & 0xff;\n      if ((ipParsed[i] & mask) !== (cidrAddr[i] & mask)) {\n        return false;\n      }\n    }\n  }\n\n  return true;\n}\n\n/**\n * Check if an IP address is private (RFC 1918, loopback, link-local, etc.)\n */\nexport function isPrivateIp(ip: string): boolean {\n  // Validate it's a proper IP\n  if (!isIP(ip)) {\n    return false;\n  }\n\n  for (const range of PRIVATE_IP_RANGES) {\n    if (isIpInCidr(ip, range)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\n/**\n * Check if a hostname or IP is a known cloud metadata endpoint.\n */\nexport function isCloudMetadata(hostname: string, ip?: string): boolean {\n  // Check if it's a known metadata IP\n  if (CLOUD_METADATA_IPS.includes(ip || \"\")) {\n    return true;\n  }\n\n  // Check if hostname matches (case-insensitive)\n  const lowerHostname = hostname.toLowerCase();\n  if (CLOUD_METADATA_HOSTNAMES.includes(lowerHostname)) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Check if a hostname or IP is localhost.\n */\nexport function isLocalhost(hostname: string, ip?: string): boolean {\n  // Check if it's a localhost IP\n  if (ip) {\n    // Check for typical localhost IPs (loopback range)\n    if (ip === \"127.0.0.1\" || ip === \"::1\" || ip === \"0.0.0.0\") {\n      return true;\n    }\n    // Check if IP starts with 127. (entire loopback range)\n    if (ip.startsWith(\"127.\")) {\n      return true;\n    }\n  }\n\n  // Check if hostname is localhost\n  const lowerHostname = hostname.toLowerCase();\n  if (LOCALHOST_NAMES.includes(lowerHostname)) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Validate that a URL is safe to connect to.\n * Performs static validation checks against hostnames and direct IP addresses.\n * Does not perform DNS resolution.\n *\n * @param url URL to validate\n * @param options.allowPrivate Allow private IPs (default: false)\n * @param options.allowHttp Allow http:// scheme (default: false)\n * @returns The validated URL\n * @throws Error if URL is not safe\n */\nexport function validateSafeUrl(\n  url: string,\n  options?: { allowPrivate?: boolean; allowHttp?: boolean }\n): string {\n  const allowPrivate = options?.allowPrivate ?? false;\n  const allowHttp = options?.allowHttp ?? false;\n\n  try {\n    let parsedUrl: URL;\n    try {\n      parsedUrl = new URL(url);\n    } catch {\n      throw new Error(`Invalid URL: ${url}`);\n    }\n\n    const hostname = parsedUrl.hostname;\n    if (!hostname) {\n      throw new Error(\"URL missing hostname.\");\n    }\n\n    // Check if it's a cloud metadata endpoint (always blocked)\n    if (isCloudMetadata(hostname)) {\n      throw new Error(`URL points to cloud metadata endpoint: ${hostname}`);\n    }\n\n    // Check if it's localhost (blocked unless allowPrivate is true)\n    if (isLocalhost(hostname)) {\n      if (!allowPrivate) {\n        throw new Error(`URL points to localhost: ${hostname}`);\n      }\n      return url;\n    }\n\n    // Check scheme (after localhost checks to give better error messages)\n    const scheme = parsedUrl.protocol;\n    if (scheme !== \"http:\" && scheme !== \"https:\") {\n      throw new Error(\n        `Invalid URL scheme: ${scheme}. Only http and https are allowed.`\n      );\n    }\n\n    if (scheme === \"http:\" && !allowHttp) {\n      throw new Error(\n        \"HTTP scheme not allowed. Use HTTPS or set allowHttp: true.\"\n      );\n    }\n\n    // If hostname is already an IP, validate it directly\n    if (isIP(hostname)) {\n      const ip = hostname;\n\n      // Check if it's localhost first (before private IP check)\n      if (isLocalhost(hostname, ip)) {\n        if (!allowPrivate) {\n          throw new Error(`URL points to localhost: ${hostname}`);\n        }\n        return url;\n      }\n\n      // Cloud metadata is always blocked\n      if (isCloudMetadata(hostname, ip)) {\n        throw new Error(\n          `URL resolves to cloud metadata IP: ${ip} (${hostname})`\n        );\n      }\n\n      // Check private IPs\n      if (isPrivateIp(ip)) {\n        if (!allowPrivate) {\n          throw new Error(\n            `URL resolves to private IP: ${ip} (${hostname}). Set allowPrivate: true to allow.`\n          );\n        }\n      }\n\n      return url;\n    }\n\n    // For regular hostnames, we've already done all hostname-based checks above\n    // (cloud metadata, localhost). If those passed, the URL is safe.\n    // We don't perform DNS resolution in this environment-agnostic function.\n    return url;\n  } catch (error) {\n    if (error && typeof error === \"object\" && \"message\" in error) {\n      throw error;\n    }\n    throw new Error(`URL validation failed: ${error}`);\n  }\n}\n\n/**\n * Check if a URL is safe to connect to (non-throwing version).\n *\n * @param url URL to check\n * @param options.allowPrivate Allow private IPs (default: false)\n * @param options.allowHttp Allow http:// scheme (default: false)\n * @returns true if URL is safe, false otherwise\n */\nexport function isSafeUrl(\n  url: string,\n  options?: { allowPrivate?: boolean; allowHttp?: boolean }\n): boolean {\n  try {\n    validateSafeUrl(url, options);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Check if two URLs have the same origin (scheme, host, port).\n * Uses semantic URL parsing to prevent SSRF bypasses via URL variations.\n *\n * @param url1 First URL\n * @param url2 Second URL\n * @returns true if both URLs have the same origin, false otherwise\n */\nexport function isSameOrigin(url1: string, url2: string): boolean {\n  try {\n    return new URL(url1).origin === new URL(url2).origin;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;;;;;;AACA,MAAM,oBAAoB;CACxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD;AAGD,MAAM,qBAAqB;CACzB;CACA;CACA;AACD;AAGD,MAAM,2BAA2B;CAC/B;CACA;CACA;AACD;AAGD,MAAM,kBAAkB,CAAC,aAAa,uBAAwB;;;;AAK9D,MAAM,aACJ;;;;AAKF,SAAS,OAAOA,IAAqB;AACnC,QAAO,WAAW,KAAK,GAAG;AAC3B;;;;;AAMD,SAAS,OAAOA,IAAqB;AACnC,QAAO,WAAW,GAAG,KAAK;AAC3B;;;;AAKD,SAAS,KAAKA,IAAqB;AACjC,QAAO,OAAO,GAAG,IAAI,OAAO,GAAG;AAChC;;;;;AAMD,SAAS,QAAQA,IAA6B;AAC5C,KAAI,OAAO,GAAG,CACZ,QAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,SAAS,OAAO,GAAG,CAAC;UAC/C,OAAO,GAAG,EAAE;EAErB,MAAM,WAAW,WAAW,GAAG;AAC/B,MAAI,CAAC,SAAU,QAAO;EACtB,MAAM,QAAQ,SAAS,MAAM,IAAI;EACjC,MAAMC,SAAmB,CAAE;AAC3B,OAAK,MAAM,QAAQ,OACjB,OAAO,KAAK,SAAS,MAAM,GAAG,CAAC;AAEjC,SAAO;CACR;AACD,QAAO;AACR;;;;AAKD,SAAS,WAAWD,IAA2B;AAE7C,KAAI,CAAC,MAAM,OAAO,OAAO,SAAU,QAAO;AAG1C,KAAI,CAAC,GAAG,SAAS,IAAI,CAAE,QAAO;AAG9B,KAAI,CAAC,kBAAkB,KAAK,GAAG,CAAE,QAAO;CAExC,IAAI,aAAa;AAGjB,KAAI,WAAW,SAAS,KAAK,EAAE;EAC7B,MAAME,UAAQ,WAAW,MAAM,KAAK;AACpC,MAAIA,QAAM,SAAS,EAAG,QAAO;EAE7B,MAAM,CAAC,MAAM,MAAM,GAAGA;EACtB,MAAM,YAAY,OAAO,KAAK,MAAM,IAAI,GAAG,CAAE;EAC7C,MAAM,aAAa,QAAQ,MAAM,MAAM,IAAI,GAAG,CAAE;EAChD,MAAM,UAAU,KAAK,UAAU,SAAS,WAAW;AAEnD,MAAI,UAAU,EAAG,QAAO;EAExB,MAAM,QAAQ,MAAM,QAAQ,CAAC,KAAK,IAAI;EACtC,aAAa;GAAC,GAAG;GAAW,GAAG;GAAO,GAAG;EAAW,EACjD,OAAO,CAAC,MAAM,MAAM,GAAG,CACvB,KAAK,IAAI;CACb;CAED,MAAM,QAAQ,WAAW,MAAM,IAAI;AACnC,KAAI,MAAM,WAAW,EAAG,QAAO;AAG/B,MAAK,MAAM,QAAQ,OAAO;AACxB,MAAI,KAAK,WAAW,KAAK,KAAK,SAAS,EAAG,QAAO;AACjD,MAAI,CAAC,iBAAiB,KAAK,KAAK,CAAE,QAAO;CAC1C;AAED,QAAO,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,IAAI;AACpE;;;;AAKD,SAAS,UACPC,MAC+D;CAC/D,MAAM,CAAC,SAAS,UAAU,GAAG,KAAK,MAAM,IAAI;AAC5C,KAAI,CAAC,WAAW,CAAC,UACf,QAAO;CAGT,MAAM,OAAO,QAAQ,QAAQ;AAC7B,KAAI,CAAC,KACH,QAAO;CAGT,MAAM,YAAY,SAAS,WAAW,GAAG;AACzC,KAAI,MAAM,UAAU,CAClB,QAAO;CAGT,MAAM,SAAS,OAAO,QAAQ;AAE9B,KAAI,UAAU,YAAY,IACxB,QAAO;AAET,KAAI,CAAC,UAAU,YAAY,GACzB,QAAO;AAGT,QAAO;EAAE;EAAM;EAAW;CAAQ;AACnC;;;;AAKD,SAAS,WAAWH,IAAYG,MAAuB;CACrD,MAAM,WAAW,QAAQ,GAAG;AAC5B,KAAI,CAAC,SACH,QAAO;CAGT,MAAM,aAAa,UAAU,KAAK;AAClC,KAAI,CAAC,WACH,QAAO;CAIT,MAAM,SAAS,OAAO,GAAG;AACzB,KAAI,WAAW,WAAW,OACxB,QAAO;CAGT,MAAM,EAAE,MAAM,UAAU,WAAW,GAAG;AAGtC,KAAI,OAEF,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,KAAK,YAAY,GAAG,EAAE,KAAK;EAClD,MAAM,cAAc,KAAK,IAAI,IAAI,YAAY,IAAI,GAAG;EACpD,MAAM,OAAQ,SAAW,KAAK,cAAgB;AAC9C,OAAK,SAAS,KAAK,WAAW,SAAS,KAAK,MAC1C,QAAO;CAEV;KAGD,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,KAAK,YAAY,EAAE,EAAE,KAAK;EACjD,MAAM,cAAc,KAAK,IAAI,GAAG,YAAY,IAAI,EAAE;EAClD,MAAM,OAAQ,OAAS,IAAI,cAAgB;AAC3C,OAAK,SAAS,KAAK,WAAW,SAAS,KAAK,MAC1C,QAAO;CAEV;AAGH,QAAO;AACR;;;;AAKD,SAAgB,YAAYH,IAAqB;AAE/C,KAAI,CAAC,KAAK,GAAG,CACX,QAAO;AAGT,MAAK,MAAM,SAAS,kBAClB,KAAI,WAAW,IAAI,MAAM,CACvB,QAAO;AAIX,QAAO;AACR;;;;AAKD,SAAgB,gBAAgBI,UAAkBC,IAAsB;AAEtE,KAAI,mBAAmB,SAAS,MAAM,GAAG,CACvC,QAAO;CAIT,MAAM,gBAAgB,SAAS,aAAa;AAC5C,KAAI,yBAAyB,SAAS,cAAc,CAClD,QAAO;AAGT,QAAO;AACR;;;;AAKD,SAAgB,YAAYD,UAAkBC,IAAsB;AAElE,KAAI,IAAI;AAEN,MAAI,OAAO,eAAe,OAAO,SAAS,OAAO,UAC/C,QAAO;AAGT,MAAI,GAAG,WAAW,OAAO,CACvB,QAAO;CAEV;CAGD,MAAM,gBAAgB,SAAS,aAAa;AAC5C,KAAI,gBAAgB,SAAS,cAAc,CACzC,QAAO;AAGT,QAAO;AACR;;;;;;;;;;;;AAaD,SAAgB,gBACdC,KACAC,SACQ;CACR,MAAM,eAAe,SAAS,gBAAgB;CAC9C,MAAM,YAAY,SAAS,aAAa;AAExC,KAAI;EACF,IAAIC;AACJ,MAAI;GACF,YAAY,IAAI,IAAI;EACrB,QAAO;AACN,SAAM,IAAI,MAAM,CAAC,aAAa,EAAE,KAAK;EACtC;EAED,MAAM,WAAW,UAAU;AAC3B,MAAI,CAAC,SACH,OAAM,IAAI,MAAM;AAIlB,MAAI,gBAAgB,SAAS,CAC3B,OAAM,IAAI,MAAM,CAAC,uCAAuC,EAAE,UAAU;AAItE,MAAI,YAAY,SAAS,EAAE;AACzB,OAAI,CAAC,aACH,OAAM,IAAI,MAAM,CAAC,yBAAyB,EAAE,UAAU;AAExD,UAAO;EACR;EAGD,MAAM,SAAS,UAAU;AACzB,MAAI,WAAW,WAAW,WAAW,SACnC,OAAM,IAAI,MACR,CAAC,oBAAoB,EAAE,OAAO,kCAAkC,CAAC;AAIrE,MAAI,WAAW,WAAW,CAAC,UACzB,OAAM,IAAI,MACR;AAKJ,MAAI,KAAK,SAAS,EAAE;GAClB,MAAM,KAAK;AAGX,OAAI,YAAY,UAAU,GAAG,EAAE;AAC7B,QAAI,CAAC,aACH,OAAM,IAAI,MAAM,CAAC,yBAAyB,EAAE,UAAU;AAExD,WAAO;GACR;AAGD,OAAI,gBAAgB,UAAU,GAAG,CAC/B,OAAM,IAAI,MACR,CAAC,mCAAmC,EAAE,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;AAK5D,OAAI,YAAY,GAAG,EACjB;QAAI,CAAC,aACH,OAAM,IAAI,MACR,CAAC,4BAA4B,EAAE,GAAG,EAAE,EAAE,SAAS,mCAAmC,CAAC;GAEtF;AAGH,UAAO;EACR;AAKD,SAAO;CACR,SAAQ,OAAO;AACd,MAAI,SAAS,OAAO,UAAU,YAAY,aAAa,MACrD,OAAM;AAER,QAAM,IAAI,MAAM,CAAC,uBAAuB,EAAE,OAAO;CAClD;AACF;;;;;;;;;AAUD,SAAgB,UACdF,KACAC,SACS;AACT,KAAI;EACF,gBAAgB,KAAK,QAAQ;AAC7B,SAAO;CACR,QAAO;AACN,SAAO;CACR;AACF;;;;;;;;;AAUD,SAAgB,aAAaE,MAAcC,MAAuB;AAChE,KAAI;AACF,SAAO,IAAI,IAAI,MAAM,WAAW,IAAI,IAAI,MAAM;CAC/C,QAAO;AACN,SAAO;CACR;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@langchain/core",
-  "version": "1.1.20",
+  "version": "1.1.21",
   "description": "Core LangChain.js abstractions and schemas",
   "type": "module",
   "engines": {
@@ -688,6 +688,17 @@
         "default": "./dist/utils/math.js"
       }
     },
+    "./utils/ssrf": {
+      "input": "./src/utils/ssrf.ts",
+      "require": {
+        "types": "./dist/utils/ssrf.d.cts",
+        "default": "./dist/utils/ssrf.cjs"
+      },
+      "import": {
+        "types": "./dist/utils/ssrf.d.ts",
+        "default": "./dist/utils/ssrf.js"
+      }
+    },
     "./utils/stream": {
       "input": "./src/utils/stream.ts",
       "require": {

package/utils/ssrf.cjs

@@ -0,0 +1 @@
+module.exports = require("../dist/utils/ssrf.cjs");

package/utils/ssrf.d.cts

@@ -0,0 +1 @@
+export * from "../dist/utils/ssrf.js";

package/utils/ssrf.d.ts

@@ -0,0 +1 @@
+export * from "../dist/utils/ssrf.js";

package/utils/ssrf.js

@@ -0,0 +1 @@
+export * from "../dist/utils/ssrf.js";